@vanditk2/agentvault-trust 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Vandit Kunapareddi
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,69 @@
+# `@vanditk2/agentvault-trust`
+
+The `TrustProvider` interface for [AgentVault](https://github.com/vandit-kunapareddi/agentvault), plus `SimpleTrustProvider` as a reference implementation. Write your own provider against this contract — on-chain reputation, behavioural scoring, identity-attested, anything — and drop it in behind the checkpoint's trust gate.
+
+## Install
+
+```bash
+npm install @vanditk2/agentvault-trust
+```
+
+## What's in here
+
+```ts
+export interface TrustProvider {
+  gate(ctx: AgentTrustContext): Promise<GateResult>;
+}
+
+export interface AgentTrustContext {
+  walletAddress: string;
+  known: boolean;
+  active: boolean;
+}
+
+export interface GateResult {
+  tier: string;        // "verified" | "probation" | "expired" | "unknown" | ...
+  score: number;       // 0–100
+  allow: boolean;
+  reason?: string;     // populated when `allow` is false
+}
+
+export class SimpleTrustProvider implements TrustProvider {
+  constructor(options?: { minScore?: number });
+  gate(ctx: AgentTrustContext): Promise<GateResult>;
+}
+```
+
+## Implementing your own
+
+```ts
+import type {
+  AgentTrustContext,
+  GateResult,
+  TrustProvider,
+} from "@vanditk2/agentvault-trust";
+
+export class MyProvider implements TrustProvider {
+  async gate(ctx: AgentTrustContext): Promise<GateResult> {
+    // Score the agent however you want — on-chain lookup, internal
+    // ML model, external reputation API, etc.
+    const score = await scoreFromMyService(ctx.walletAddress);
+    return {
+      tier: score >= 80 ? "verified" : "untrusted",
+      score,
+      allow: score >= 70,
+      reason: score < 70 ? "Below threshold" : undefined,
+    };
+  }
+}
+```
+
+A runnable reference implementation (calling an external reputation HTTP service, with full never-fail-open error handling) lives at [`examples/custom-trust-provider`](https://github.com/vandit-kunapareddi/agentvault/tree/main/examples/custom-trust-provider).
+
+## Wiring it into the checkpoint
+
+Swap `SimpleTrustProvider` for your class in [`apps/checkpoint/src/trust.ts`](https://github.com/vandit-kunapareddi/agentvault/blob/main/apps/checkpoint/src/trust.ts) — one-line change.
+
+## License
+
+[MIT](./LICENSE)

package/dist/index.d.ts

@@ -0,0 +1,23 @@
+export interface AgentTrustContext {
+    walletAddress: string;
+    known: boolean;
+    active: boolean;
+}
+export interface GateResult {
+    tier: string;
+    score: number;
+    allow: boolean;
+    reason?: string;
+}
+export interface TrustProvider {
+    gate(ctx: AgentTrustContext): Promise<GateResult>;
+}
+export interface SimpleTrustProviderOptions {
+    minScore?: number;
+}
+export declare class SimpleTrustProvider implements TrustProvider {
+    private readonly minScore;
+    constructor(options?: SimpleTrustProviderOptions);
+    gate(ctx: AgentTrustContext): Promise<GateResult>;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAID,qBAAa,mBAAoB,YAAW,aAAa;IACvD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;gBAEtB,OAAO,GAAE,0BAA+B;IAI9C,IAAI,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC;CA0BxD"}

package/dist/index.js

@@ -0,0 +1,34 @@
+const DEFAULT_MIN_SCORE = 50;
+export class SimpleTrustProvider {
+    minScore;
+    constructor(options = {}) {
+        this.minScore = options.minScore ?? DEFAULT_MIN_SCORE;
+    }
+    async gate(ctx) {
+        if (!ctx.known) {
+            return {
+                tier: "unknown",
+                score: 10,
+                allow: false,
+                reason: "Wallet is not a registered agent",
+            };
+        }
+        if (!ctx.active) {
+            const score = 30;
+            return {
+                tier: "expired",
+                score,
+                allow: score >= this.minScore,
+                reason: "Agent credential is inactive or expired",
+            };
+        }
+        const score = 85;
+        return {
+            tier: "verified",
+            score,
+            allow: score >= this.minScore,
+            reason: score >= this.minScore ? undefined : "Trust score below required threshold",
+        };
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAqBA,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,MAAM,OAAO,mBAAmB;IACb,QAAQ,CAAS;IAElC,YAAY,UAAsC,EAAE;QAClD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAsB;QAC/B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE,EAAE;gBACT,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,kCAAkC;aAC3C,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,EAAE,CAAC;YACjB,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,KAAK;gBACL,KAAK,EAAE,KAAK,IAAI,IAAI,CAAC,QAAQ;gBAC7B,MAAM,EAAE,yCAAyC;aAClD,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,EAAE,CAAC;QACjB,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,KAAK;YACL,KAAK,EAAE,KAAK,IAAI,IAAI,CAAC,QAAQ;YAC7B,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,sCAAsC;SACpF,CAAC;IACJ,CAAC;CACF"}

package/package.json

@@ -0,0 +1,50 @@
+{
+  "name": "@vanditk2/agentvault-trust",
+  "version": "0.1.0",
+  "description": "The TrustProvider interface for AgentVault — plus SimpleTrustProvider as a reference implementation. Write your own provider against this contract.",
+  "keywords": [
+    "agentvault",
+    "agentic-payments",
+    "ai-agents",
+    "trust",
+    "reputation"
+  ],
+  "license": "MIT",
+  "author": "Vandit Kunapareddi",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/vandit-kunapareddi/agentvault.git",
+    "directory": "packages/trust"
+  },
+  "homepage": "https://github.com/vandit-kunapareddi/agentvault#readme",
+  "bugs": {
+    "url": "https://github.com/vandit-kunapareddi/agentvault/issues"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "prepublishOnly": "npm run build"
+  },
+  "devDependencies": {
+    "typescript": "^5.6.0"
+  }
+}