@vorionsys/platform-core 0.1.0

package/dist/trust-engine/car-integration.d.ts

@@ -0,0 +1,263 @@
+/**
+ * CAR Integration for Trust Engine
+ *
+ * Bridges the @vorionsys/contracts/car module with the Trust Engine,
+ * providing trust-aware operations on CAR (Capability Authority Record) strings.
+ *
+ * CAR = Categorical Agentic Registry (formerly ACI - Categorical Agentic Registry)
+ *
+ * @packageDocumentation
+ */
+import { z } from 'zod';
+import { type Attestation, type EffectivePermission, type PermissionCheckResult, attestationSchema, effectivePermissionSchema, permissionCheckResultSchema, CertificationTier, RuntimeTier, CapabilityLevel } from '@vorionsys/contracts/car';
+import { TrustTier } from '@vorionsys/shared-constants';
+export { type Attestation, type EffectivePermission, type PermissionCheckResult, attestationSchema, effectivePermissionSchema, permissionCheckResultSchema, CertificationTier, RuntimeTier, CapabilityLevel, };
+export declare const AttestationSchema: z.ZodObject<{
+    id: z.ZodString;
+    issuer: z.ZodString;
+    subject: z.ZodString;
+    scope: z.ZodEnum<["full", "domain", "level", "training", "security", "compliance", "identity", "supervision"]>;
+    certificationTier: z.ZodNativeEnum<typeof CertificationTier>;
+    domains: z.ZodOptional<z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R", "S", "T", "U", "V", "W", "X", "Y", "Z"]>, "many">>;
+    issuedAt: z.ZodDate;
+    expiresAt: z.ZodDate;
+    status: z.ZodEnum<["active", "expired", "revoked", "suspended", "pending"]>;
+    evidence: z.ZodOptional<z.ZodObject<{
+        testResults: z.ZodOptional<z.ZodString>;
+        auditReport: z.ZodOptional<z.ZodString>;
+        trainingVerification: z.ZodOptional<z.ZodString>;
+        complianceDocumentation: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodOptional<z.ZodString>, z.objectOutputType<{
+        testResults: z.ZodOptional<z.ZodString>;
+        auditReport: z.ZodOptional<z.ZodString>;
+        trainingVerification: z.ZodOptional<z.ZodString>;
+        complianceDocumentation: z.ZodOptional<z.ZodString>;
+    }, z.ZodOptional<z.ZodString>, "strip">, z.objectInputType<{
+        testResults: z.ZodOptional<z.ZodString>;
+        auditReport: z.ZodOptional<z.ZodString>;
+        trainingVerification: z.ZodOptional<z.ZodString>;
+        complianceDocumentation: z.ZodOptional<z.ZodString>;
+    }, z.ZodOptional<z.ZodString>, "strip">>>;
+    proof: z.ZodOptional<z.ZodObject<{
+        type: z.ZodString;
+        created: z.ZodString;
+        verificationMethod: z.ZodString;
+        proofPurpose: z.ZodString;
+        jws: z.ZodString;
+        nonce: z.ZodOptional<z.ZodString>;
+        challenge: z.ZodOptional<z.ZodString>;
+        domain: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        type: string;
+        created: string;
+        verificationMethod: string;
+        proofPurpose: string;
+        jws: string;
+        nonce?: string | undefined;
+        domain?: string | undefined;
+        challenge?: string | undefined;
+    }, {
+        type: string;
+        created: string;
+        verificationMethod: string;
+        proofPurpose: string;
+        jws: string;
+        nonce?: string | undefined;
+        domain?: string | undefined;
+        challenge?: string | undefined;
+    }>>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, "strip", z.ZodTypeAny, {
+    status: "active" | "suspended" | "pending" | "revoked" | "expired";
+    expiresAt: Date;
+    id: string;
+    scope: "compliance" | "security" | "training" | "domain" | "level" | "identity" | "full" | "supervision";
+    issuedAt: Date;
+    issuer: string;
+    subject: string;
+    certificationTier: CertificationTier;
+    metadata?: Record<string, unknown> | undefined;
+    proof?: {
+        type: string;
+        created: string;
+        verificationMethod: string;
+        proofPurpose: string;
+        jws: string;
+        nonce?: string | undefined;
+        domain?: string | undefined;
+        challenge?: string | undefined;
+    } | undefined;
+    domains?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[] | undefined;
+    evidence?: z.objectOutputType<{
+        testResults: z.ZodOptional<z.ZodString>;
+        auditReport: z.ZodOptional<z.ZodString>;
+        trainingVerification: z.ZodOptional<z.ZodString>;
+        complianceDocumentation: z.ZodOptional<z.ZodString>;
+    }, z.ZodOptional<z.ZodString>, "strip"> | undefined;
+}, {
+    status: "active" | "suspended" | "pending" | "revoked" | "expired";
+    expiresAt: Date;
+    id: string;
+    scope: "compliance" | "security" | "training" | "domain" | "level" | "identity" | "full" | "supervision";
+    issuedAt: Date;
+    issuer: string;
+    subject: string;
+    certificationTier: CertificationTier;
+    metadata?: Record<string, unknown> | undefined;
+    proof?: {
+        type: string;
+        created: string;
+        verificationMethod: string;
+        proofPurpose: string;
+        jws: string;
+        nonce?: string | undefined;
+        domain?: string | undefined;
+        challenge?: string | undefined;
+    } | undefined;
+    domains?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[] | undefined;
+    evidence?: z.objectInputType<{
+        testResults: z.ZodOptional<z.ZodString>;
+        auditReport: z.ZodOptional<z.ZodString>;
+        trainingVerification: z.ZodOptional<z.ZodString>;
+        complianceDocumentation: z.ZodOptional<z.ZodString>;
+    }, z.ZodOptional<z.ZodString>, "strip"> | undefined;
+}>;
+/**
+ * Trust context for CAR-based permission calculations
+ */
+export interface CARTrustContext {
+    /** The CAR string being evaluated */
+    car: string;
+    /** Current trust score (0-1000) */
+    trustScore: number;
+    /** Current trust tier */
+    trustTier: TrustTier;
+    /** Certification tier from attestations */
+    certificationTier?: CertificationTier;
+    /** Runtime deployment tier */
+    runtimeTier?: RuntimeTier;
+    /** Capability level from CAR */
+    capabilityLevel: CapabilityLevel;
+    /** Active attestations */
+    attestations: Attestation[];
+    /** Observability ceiling */
+    observabilityCeiling?: number;
+    /** Context policy ceiling */
+    contextPolicyCeiling?: number;
+}
+/**
+ * @deprecated Use CARTrustContext instead
+ */
+export type ACITrustContext = CARTrustContext;
+/**
+ * Convert trust score to tier
+ */
+export declare function scoreToTier(score: number): TrustTier;
+/**
+ * Get minimum score for a certification tier
+ */
+export declare function certificationTierToMinScore(tier: CertificationTier): number;
+/**
+ * Get maximum score for a certification tier
+ */
+export declare function certificationTierToMaxScore(tier: CertificationTier): number;
+/**
+ * Get representative score for a certification tier (midpoint)
+ */
+export declare function certificationTierToScore(tier: CertificationTier): number;
+/**
+ * Get minimum score for a trust tier
+ */
+export declare function tierToMinScore(tier: TrustTier): number;
+/**
+ * Lookup certification tier from trust score (without hysteresis)
+ */
+export declare function lookupCertificationTier(score: number): CertificationTier;
+/** Default hysteresis buffer for demotion protection */
+export declare const DEFAULT_DEMOTION_HYSTERESIS = 25;
+/**
+ * Lookup certification tier with demotion hysteresis protection.
+ *
+ * - Promotion: Immediate when score reaches tier minimum
+ * - Demotion: Only when score falls below (tier minimum - hysteresis)
+ *
+ * This prevents tier flapping when scores fluctuate near boundaries,
+ * giving agents grace to recover before being demoted.
+ *
+ * @param score - Current trust score (0-1000)
+ * @param currentTier - Agent's current certification tier (undefined for new agents)
+ * @param hysteresis - Buffer below threshold before demotion (default: 25)
+ */
+export declare function lookupCertificationTierWithHysteresis(score: number, currentTier: CertificationTier | undefined, hysteresis?: number): CertificationTier;
+/**
+ * Get maximum capability level allowed by competence
+ */
+export declare function competenceLevelToCeiling(level: CapabilityLevel): number;
+/**
+ * Determine reason for capability ceiling
+ */
+export declare function determineCeilingReason(context: CARTrustContext): {
+    ceiling: number;
+    reason: string;
+};
+/**
+ * Convert attestation to trust signal
+ */
+export declare function attestationToTrustSignal(attestation: Attestation): {
+    source: string;
+    weight: number;
+    score: number;
+    timestamp: Date;
+};
+/**
+ * Calculate effective permission from CAR trust context
+ */
+export declare function calculateEffectiveFromCAR(context: CARTrustContext): EffectivePermission;
+/**
+ * @deprecated Use calculateEffectiveFromCAR instead
+ */
+export declare const calculateEffectiveFromACI: typeof calculateEffectiveFromCAR;
+/**
+ * Calculate effective tier from context
+ */
+export declare function calculateEffectiveTier(context: CARTrustContext): TrustTier;
+/**
+ * Calculate effective score from context
+ */
+export declare function calculateEffectiveScore(context: CARTrustContext): number;
+/**
+ * Apply CAR floor to trust score
+ * Floor ensures minimum trust based on attestations
+ */
+export declare function applyCARFloor(context: CARTrustContext, score: number): number;
+/**
+ * @deprecated Use applyCARFloor instead
+ */
+export declare const applyACIFloor: typeof applyCARFloor;
+/**
+ * Enforce CAR ceiling on trust score
+ * Ceiling prevents exceeding capability level limits
+ */
+export declare function enforceCARCeiling(context: CARTrustContext, score: number): number;
+/**
+ * @deprecated Use enforceCARCeiling instead
+ */
+export declare const enforceACICeiling: typeof enforceCARCeiling;
+/**
+ * Create a CAR trust context
+ */
+export declare function createCARTrustContext(options: {
+    car: string;
+    trustScore: number;
+    capabilityLevel: CapabilityLevel;
+    attestations?: Attestation[];
+    certificationTier?: CertificationTier;
+    runtimeTier?: RuntimeTier;
+    observabilityCeiling?: number;
+    contextPolicyCeiling?: number;
+}): CARTrustContext;
+/**
+ * @deprecated Use createCARTrustContext instead
+ */
+export declare const createACITrustContext: typeof createCARTrustContext;
+//# sourceMappingURL=car-integration.d.ts.map

package/dist/trust-engine/car-integration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"car-integration.d.ts","sourceRoot":"","sources":["../../src/trust-engine/car-integration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAE1B,iBAAiB,EACjB,yBAAyB,EACzB,2BAA2B,EAG3B,iBAAiB,EACjB,WAAW,EACX,eAAe,EAEhB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,SAAS,EAGV,MAAM,6BAA6B,CAAC;AAMrC,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,iBAAiB,EACjB,yBAAyB,EACzB,2BAA2B,EAC3B,iBAAiB,EACjB,WAAW,EACX,eAAe,GAChB,CAAC;AAGF,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aA+L5B,CAAA;cAGC,CAAC;iBAAuC,CAAC;;;;;;;aAOjC,CAAC;cACO,CAAC;iBACd,CAAC;;;;;;;;;;;;;;;;;;;aAkBE,CAAC;cACJ,CAAC;iBACH,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;aAsCS,CAAC;cACU,CAAC;iBAAuC,CAAC;;;;;;;;;EAtQhB,CAAC;AAMnD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,qCAAqC;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,yBAAyB;IACzB,SAAS,EAAE,SAAS,CAAC;IACrB,2CAA2C;IAC3C,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,8BAA8B;IAC9B,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,gCAAgC;IAChC,eAAe,EAAE,eAAe,CAAC;IACjC,0BAA0B;IAC1B,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,4BAA4B;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,6BAA6B;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,eAAe,CAAC;AAM9C;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAEpD;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAY3E;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAY3E;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAIxE;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,CAEtD;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,iBAAiB,CASxE;AAED,wDAAwD;AACxD,eAAO,MAAM,2BAA2B,KAAK,CAAC;AAE9C;;;;;;;;;;;;GAYG;AACH,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,iBAAiB,GAAG,SAAS,EAC1C,UAAU,GAAE,MAAoC,GAC/C,iBAAiB,CAyBnB;AAMD;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAGvE;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,eAAe,GACvB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAsCrC;AAoBD;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,WAAW,GAAG;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;CACjB,CAkBA;AAMD;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,eAAe,GACvB,mBAAmB,CAYrB;AAED;;GAEG;AACH,eAAO,MAAM,yBAAyB,kCAA4B,CAAC;AAEnE;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,eAAe,GAAG,SAAS,CAc1E;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,CAMxE;AAMD;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE,MAAM,GACZ,MAAM,CAUR;AAED;;GAEG;AACH,eAAO,MAAM,aAAa,sBAAgB,CAAC;AAE3C;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE,MAAM,GACZ,MAAM,CAKR;AAED;;GAEG;AACH,eAAO,MAAM,iBAAiB,0BAAoB,CAAC;AAMnD;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,eAAe,CAAC;IACjC,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC;IAC7B,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B,GAAG,eAAe,CAYlB;AAED;;GAEG;AACH,eAAO,MAAM,qBAAqB,8BAAwB,CAAC"}

package/dist/trust-engine/car-integration.js

@@ -0,0 +1,320 @@
+/**
+ * CAR Integration for Trust Engine
+ *
+ * Bridges the @vorionsys/contracts/car module with the Trust Engine,
+ * providing trust-aware operations on CAR (Capability Authority Record) strings.
+ *
+ * CAR = Categorical Agentic Registry (formerly ACI - Categorical Agentic Registry)
+ *
+ * @packageDocumentation
+ */
+import { attestationSchema, effectivePermissionSchema, permissionCheckResultSchema, calculateEffectivePermission, CertificationTier, RuntimeTier, CapabilityLevel, certificationTierToRuntimeTier, } from '@vorionsys/contracts/car';
+import { TrustTier, TIER_THRESHOLDS, scoreToTier as sharedScoreToTier, } from '@vorionsys/shared-constants';
+// =============================================================================
+// RE-EXPORTS FROM CONTRACTS
+// =============================================================================
+export { attestationSchema, effectivePermissionSchema, permissionCheckResultSchema, CertificationTier, RuntimeTier, CapabilityLevel, };
+// Alias for backwards compatibility
+export const AttestationSchema = attestationSchema;
+// =============================================================================
+// TIER/SCORE CONVERSIONS
+// =============================================================================
+/**
+ * Convert trust score to tier
+ */
+export function scoreToTier(score) {
+    return sharedScoreToTier(score);
+}
+/**
+ * Get minimum score for a certification tier
+ */
+export function certificationTierToMinScore(tier) {
+    const mapping = {
+        [CertificationTier.T0_SANDBOX]: 0,
+        [CertificationTier.T1_OBSERVED]: 200,
+        [CertificationTier.T2_PROVISIONAL]: 350,
+        [CertificationTier.T3_MONITORED]: 500,
+        [CertificationTier.T4_STANDARD]: 650,
+        [CertificationTier.T5_TRUSTED]: 800,
+        [CertificationTier.T6_CERTIFIED]: 876,
+        [CertificationTier.T7_AUTONOMOUS]: 951,
+    };
+    return mapping[tier] ?? 0;
+}
+/**
+ * Get maximum score for a certification tier
+ */
+export function certificationTierToMaxScore(tier) {
+    const mapping = {
+        [CertificationTier.T0_SANDBOX]: 199,
+        [CertificationTier.T1_OBSERVED]: 349,
+        [CertificationTier.T2_PROVISIONAL]: 499,
+        [CertificationTier.T3_MONITORED]: 649,
+        [CertificationTier.T4_STANDARD]: 799,
+        [CertificationTier.T5_TRUSTED]: 875,
+        [CertificationTier.T6_CERTIFIED]: 950,
+        [CertificationTier.T7_AUTONOMOUS]: 1000,
+    };
+    return mapping[tier] ?? 199;
+}
+/**
+ * Get representative score for a certification tier (midpoint)
+ */
+export function certificationTierToScore(tier) {
+    const min = certificationTierToMinScore(tier);
+    const max = certificationTierToMaxScore(tier);
+    return Math.floor((min + max) / 2);
+}
+/**
+ * Get minimum score for a trust tier
+ */
+export function tierToMinScore(tier) {
+    return TIER_THRESHOLDS[tier].min;
+}
+/**
+ * Lookup certification tier from trust score (without hysteresis)
+ */
+export function lookupCertificationTier(score) {
+    if (score >= 951)
+        return CertificationTier.T7_AUTONOMOUS;
+    if (score >= 876)
+        return CertificationTier.T6_CERTIFIED;
+    if (score >= 800)
+        return CertificationTier.T5_TRUSTED;
+    if (score >= 650)
+        return CertificationTier.T4_STANDARD;
+    if (score >= 500)
+        return CertificationTier.T3_MONITORED;
+    if (score >= 350)
+        return CertificationTier.T2_PROVISIONAL;
+    if (score >= 200)
+        return CertificationTier.T1_OBSERVED;
+    return CertificationTier.T0_SANDBOX;
+}
+/** Default hysteresis buffer for demotion protection */
+export const DEFAULT_DEMOTION_HYSTERESIS = 25;
+/**
+ * Lookup certification tier with demotion hysteresis protection.
+ *
+ * - Promotion: Immediate when score reaches tier minimum
+ * - Demotion: Only when score falls below (tier minimum - hysteresis)
+ *
+ * This prevents tier flapping when scores fluctuate near boundaries,
+ * giving agents grace to recover before being demoted.
+ *
+ * @param score - Current trust score (0-1000)
+ * @param currentTier - Agent's current certification tier (undefined for new agents)
+ * @param hysteresis - Buffer below threshold before demotion (default: 25)
+ */
+export function lookupCertificationTierWithHysteresis(score, currentTier, hysteresis = DEFAULT_DEMOTION_HYSTERESIS) {
+    // For new agents (no current tier), use standard lookup
+    if (currentTier === undefined) {
+        return lookupCertificationTier(score);
+    }
+    // Calculate what tier the score would normally map to
+    const naiveTier = lookupCertificationTier(score);
+    // If score qualifies for same or higher tier, use naive result (promotion is immediate)
+    if (naiveTier >= currentTier) {
+        return naiveTier;
+    }
+    // Score dropped - check if it's below the demotion threshold
+    const currentTierMin = certificationTierToMinScore(currentTier);
+    const demotionThreshold = currentTierMin - hysteresis;
+    // If score is in the grace zone, maintain current tier
+    if (score >= demotionThreshold) {
+        return currentTier;
+    }
+    // Score fell below grace zone - allow demotion
+    return naiveTier;
+}
+// =============================================================================
+// CAPABILITY LEVEL OPERATIONS
+// =============================================================================
+/**
+ * Get maximum capability level allowed by competence
+ */
+export function competenceLevelToCeiling(level) {
+    // Capability levels map directly to ceiling values
+    return level;
+}
+/**
+ * Determine reason for capability ceiling
+ */
+export function determineCeilingReason(context) {
+    const ceilings = [];
+    // Trust score ceiling
+    const trustCeiling = Math.floor(context.trustScore / 125); // 0-7 based on 0-1000
+    ceilings.push({
+        ceiling: Math.min(trustCeiling, 7),
+        reason: `Trust score (${context.trustScore}) limits to L${Math.min(trustCeiling, 7)}`,
+    });
+    // Certification tier ceiling
+    if (context.certificationTier !== undefined) {
+        const certCeiling = certificationTierToCeiling(context.certificationTier);
+        ceilings.push({
+            ceiling: certCeiling,
+            reason: `Certification tier limits to L${certCeiling}`,
+        });
+    }
+    // Observability ceiling
+    if (context.observabilityCeiling !== undefined) {
+        ceilings.push({
+            ceiling: context.observabilityCeiling,
+            reason: `Observability limits to L${context.observabilityCeiling}`,
+        });
+    }
+    // Context policy ceiling
+    if (context.contextPolicyCeiling !== undefined) {
+        ceilings.push({
+            ceiling: context.contextPolicyCeiling,
+            reason: `Context policy limits to L${context.contextPolicyCeiling}`,
+        });
+    }
+    // Return the most restrictive ceiling
+    ceilings.sort((a, b) => a.ceiling - b.ceiling);
+    return ceilings[0] ?? { ceiling: 7, reason: 'No restrictions' };
+}
+function certificationTierToCeiling(tier) {
+    const mapping = {
+        [CertificationTier.T0_SANDBOX]: 0,
+        [CertificationTier.T1_OBSERVED]: 1,
+        [CertificationTier.T2_PROVISIONAL]: 2,
+        [CertificationTier.T3_MONITORED]: 3,
+        [CertificationTier.T4_STANDARD]: 4,
+        [CertificationTier.T5_TRUSTED]: 5,
+        [CertificationTier.T6_CERTIFIED]: 6,
+        [CertificationTier.T7_AUTONOMOUS]: 7,
+    };
+    return mapping[tier] ?? 0;
+}
+// =============================================================================
+// TRUST SIGNAL CONVERSION
+// =============================================================================
+/**
+ * Convert attestation to trust signal
+ */
+export function attestationToTrustSignal(attestation) {
+    // Calculate score contribution based on attestation scope and status
+    const scopeWeights = {
+        domain: 100,
+        capability: 150,
+        identity: 200,
+        compliance: 250,
+    };
+    const weight = scopeWeights[attestation.scope] ?? 100;
+    const score = attestation.status === 'active' ? weight : 0;
+    return {
+        source: `attestation:${attestation.scope}`,
+        weight: weight / 250, // Normalize to 0-1
+        score,
+        timestamp: attestation.issuedAt,
+    };
+}
+// =============================================================================
+// EFFECTIVE CALCULATION
+// =============================================================================
+/**
+ * Calculate effective permission from CAR trust context
+ */
+export function calculateEffectiveFromCAR(context) {
+    const permContext = {
+        certificationTier: context.certificationTier ?? lookupCertificationTier(context.trustScore),
+        competenceLevel: context.capabilityLevel,
+        runtimeTier: context.runtimeTier ?? certificationTierToRuntimeTier(context.certificationTier ?? lookupCertificationTier(context.trustScore)),
+        observabilityCeiling: context.observabilityCeiling,
+        contextPolicyCeiling: context.contextPolicyCeiling,
+    };
+    return calculateEffectivePermission(permContext);
+}
+/**
+ * @deprecated Use calculateEffectiveFromCAR instead
+ */
+export const calculateEffectiveFromACI = calculateEffectiveFromCAR;
+/**
+ * Calculate effective tier from context
+ */
+export function calculateEffectiveTier(context) {
+    const { ceiling } = determineCeilingReason(context);
+    // Map ceiling (0-7) to tier
+    const tierMap = [
+        TrustTier.T0_SANDBOX,
+        TrustTier.T1_OBSERVED,
+        TrustTier.T2_PROVISIONAL,
+        TrustTier.T3_MONITORED,
+        TrustTier.T4_STANDARD,
+        TrustTier.T5_TRUSTED,
+        TrustTier.T6_CERTIFIED,
+        TrustTier.T7_AUTONOMOUS,
+    ];
+    return tierMap[Math.min(ceiling, 7)] ?? TrustTier.T0_SANDBOX;
+}
+/**
+ * Calculate effective score from context
+ */
+export function calculateEffectiveScore(context) {
+    const effectiveTier = calculateEffectiveTier(context);
+    const tierThreshold = TIER_THRESHOLDS[effectiveTier];
+    // Return midpoint of effective tier range, capped by actual score
+    const midpoint = Math.floor((tierThreshold.min + tierThreshold.max) / 2);
+    return Math.min(context.trustScore, midpoint);
+}
+// =============================================================================
+// FLOOR AND CEILING ENFORCEMENT
+// =============================================================================
+/**
+ * Apply CAR floor to trust score
+ * Floor ensures minimum trust based on attestations
+ */
+export function applyCARFloor(context, score) {
+    // Calculate floor from attestations
+    let floor = 0;
+    for (const attestation of context.attestations) {
+        if (attestation.status === 'active') {
+            const signal = attestationToTrustSignal(attestation);
+            floor = Math.max(floor, signal.score);
+        }
+    }
+    return Math.max(score, floor);
+}
+/**
+ * @deprecated Use applyCARFloor instead
+ */
+export const applyACIFloor = applyCARFloor;
+/**
+ * Enforce CAR ceiling on trust score
+ * Ceiling prevents exceeding capability level limits
+ */
+export function enforceCARCeiling(context, score) {
+    const { ceiling } = determineCeilingReason(context);
+    // Convert capability ceiling to max score
+    const maxScore = (ceiling + 1) * 125 - 1; // L0=124, L1=249, ..., L7=999
+    return Math.min(score, Math.min(maxScore, 1000));
+}
+/**
+ * @deprecated Use enforceCARCeiling instead
+ */
+export const enforceACICeiling = enforceCARCeiling;
+// =============================================================================
+// CONTEXT CREATION
+// =============================================================================
+/**
+ * Create a CAR trust context
+ */
+export function createCARTrustContext(options) {
+    return {
+        car: options.car,
+        trustScore: options.trustScore,
+        trustTier: scoreToTier(options.trustScore),
+        capabilityLevel: options.capabilityLevel,
+        attestations: options.attestations ?? [],
+        certificationTier: options.certificationTier,
+        runtimeTier: options.runtimeTier,
+        observabilityCeiling: options.observabilityCeiling,
+        contextPolicyCeiling: options.contextPolicyCeiling,
+    };
+}
+/**
+ * @deprecated Use createCARTrustContext instead
+ */
+export const createACITrustContext = createCARTrustContext;
+//# sourceMappingURL=car-integration.js.map

package/dist/trust-engine/car-integration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"car-integration.js","sourceRoot":"","sources":["../../src/trust-engine/car-integration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAKL,iBAAiB,EACjB,yBAAyB,EACzB,2BAA2B,EAC3B,4BAA4B,EAE5B,iBAAiB,EACjB,WAAW,EACX,eAAe,EACf,8BAA8B,GAC/B,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,SAAS,EACT,eAAe,EACf,WAAW,IAAI,iBAAiB,GACjC,MAAM,6BAA6B,CAAC;AAErC,gFAAgF;AAChF,4BAA4B;AAC5B,gFAAgF;AAEhF,OAAO,EAIL,iBAAiB,EACjB,yBAAyB,EACzB,2BAA2B,EAC3B,iBAAiB,EACjB,WAAW,EACX,eAAe,GAChB,CAAC;AAEF,oCAAoC;AACpC,MAAM,CAAC,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;AAmCnD,gFAAgF;AAChF,yBAAyB;AACzB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAAuB;IACjE,MAAM,OAAO,GAAsC;QACjD,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,GAAG;QACpC,CAAC,iBAAiB,CAAC,cAAc,CAAC,EAAE,GAAG;QACvC,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,GAAG;QACrC,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,GAAG;QACpC,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,GAAG;QACnC,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,GAAG;QACrC,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAAE,GAAG;KACvC,CAAC;IACF,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAAuB;IACjE,MAAM,OAAO,GAAsC;QACjD,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,GAAG;QACnC,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,GAAG;QACpC,CAAC,iBAAiB,CAAC,cAAc,CAAC,EAAE,GAAG;QACvC,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,GAAG;QACrC,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,GAAG;QACpC,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,GAAG;QACnC,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,GAAG;QACrC,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAAE,IAAI;KACxC,CAAC;IACF,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAuB;IAC9D,MAAM,GAAG,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC;IAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,IAAe;IAC5C,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;AACnC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACnD,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,iBAAiB,CAAC,aAAa,CAAC;IACzD,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,iBAAiB,CAAC,YAAY,CAAC;IACxD,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,iBAAiB,CAAC,UAAU,CAAC;IACtD,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,iBAAiB,CAAC,WAAW,CAAC;IACvD,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,iBAAiB,CAAC,YAAY,CAAC;IACxD,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,iBAAiB,CAAC,cAAc,CAAC;IAC1D,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,iBAAiB,CAAC,WAAW,CAAC;IACvD,OAAO,iBAAiB,CAAC,UAAU,CAAC;AACtC,CAAC;AAED,wDAAwD;AACxD,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAE9C;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qCAAqC,CACnD,KAAa,EACb,WAA0C,EAC1C,aAAqB,2BAA2B;IAEhD,wDAAwD;IACxD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,uBAAuB,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IAED,sDAAsD;IACtD,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAEjD,wFAAwF;IACxF,IAAI,SAAS,IAAI,WAAW,EAAE,CAAC;QAC7B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,6DAA6D;IAC7D,MAAM,cAAc,GAAG,2BAA2B,CAAC,WAAW,CAAC,CAAC;IAChE,MAAM,iBAAiB,GAAG,cAAc,GAAG,UAAU,CAAC;IAEtD,uDAAuD;IACvD,IAAI,KAAK,IAAI,iBAAiB,EAAE,CAAC;QAC/B,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,+CAA+C;IAC/C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,gFAAgF;AAChF,8BAA8B;AAC9B,gFAAgF;AAEhF;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAsB;IAC7D,mDAAmD;IACnD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAwB;IAExB,MAAM,QAAQ,GAA0C,EAAE,CAAC;IAE3D,sBAAsB;IACtB,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,sBAAsB;IACjF,QAAQ,CAAC,IAAI,CAAC;QACZ,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;QAClC,MAAM,EAAE,gBAAgB,OAAO,CAAC,UAAU,gBAAgB,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE;KACtF,CAAC,CAAC;IAEH,6BAA6B;IAC7B,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC5C,MAAM,WAAW,GAAG,0BAA0B,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC1E,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,WAAW;YACpB,MAAM,EAAE,iCAAiC,WAAW,EAAE;SACvD,CAAC,CAAC;IACL,CAAC;IAED,wBAAwB;IACxB,IAAI,OAAO,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;QAC/C,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,OAAO,CAAC,oBAAoB;YACrC,MAAM,EAAE,4BAA4B,OAAO,CAAC,oBAAoB,EAAE;SACnE,CAAC,CAAC;IACL,CAAC;IAED,yBAAyB;IACzB,IAAI,OAAO,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;QAC/C,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,OAAO,CAAC,oBAAoB;YACrC,MAAM,EAAE,6BAA6B,OAAO,CAAC,oBAAoB,EAAE;SACpE,CAAC,CAAC;IACL,CAAC;IAED,sCAAsC;IACtC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;IAC/C,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAuB;IACzD,MAAM,OAAO,GAAsC;QACjD,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;QAClC,CAAC,iBAAiB,CAAC,cAAc,CAAC,EAAE,CAAC;QACrC,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC;QACnC,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;QAClC,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC;QACnC,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAAE,CAAC;KACrC,CAAC;IACF,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,gFAAgF;AAChF,0BAA0B;AAC1B,gFAAgF;AAEhF;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,WAAwB;IAM/D,qEAAqE;IACrE,MAAM,YAAY,GAA2B;QAC3C,MAAM,EAAE,GAAG;QACX,UAAU,EAAE,GAAG;QACf,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE,GAAG;KAChB,CAAC;IAEF,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC;IACtD,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAE3D,OAAO;QACL,MAAM,EAAE,eAAe,WAAW,CAAC,KAAK,EAAE;QAC1C,MAAM,EAAE,MAAM,GAAG,GAAG,EAAE,mBAAmB;QACzC,KAAK;QACL,SAAS,EAAE,WAAW,CAAC,QAAQ;KAChC,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,wBAAwB;AACxB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAAwB;IAExB,MAAM,WAAW,GAA+B;QAC9C,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,IAAI,uBAAuB,CAAC,OAAO,CAAC,UAAU,CAAC;QAC3F,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,8BAA8B,CAChE,OAAO,CAAC,iBAAiB,IAAI,uBAAuB,CAAC,OAAO,CAAC,UAAU,CAAC,CACzE;QACD,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;QAClD,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;KACnD,CAAC;IAEF,OAAO,4BAA4B,CAAC,WAAW,CAAC,CAAC;AACnD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,yBAAyB,CAAC;AAEnE;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAwB;IAC7D,MAAM,EAAE,OAAO,EAAE,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACpD,4BAA4B;IAC5B,MAAM,OAAO,GAAgB;QAC3B,SAAS,CAAC,UAAU;QACpB,SAAS,CAAC,WAAW;QACrB,SAAS,CAAC,cAAc;QACxB,SAAS,CAAC,YAAY;QACtB,SAAS,CAAC,WAAW;QACrB,SAAS,CAAC,UAAU;QACpB,SAAS,CAAC,YAAY;QACtB,SAAS,CAAC,aAAa;KACxB,CAAC;IACF,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC;AAC/D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAwB;IAC9D,MAAM,aAAa,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,aAAa,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;IACrD,kEAAkE;IAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACzE,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED,gFAAgF;AAChF,gCAAgC;AAChC,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAwB,EACxB,KAAa;IAEb,oCAAoC;IACpC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,WAAW,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QAC/C,IAAI,WAAW,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAC;YACrD,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,CAAC;AAE3C;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAwB,EACxB,KAAa;IAEb,MAAM,EAAE,OAAO,EAAE,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACpD,0CAA0C;IAC1C,MAAM,QAAQ,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,8BAA8B;IACxE,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;AACnD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;AAEnD,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,OASrC;IACC,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC;QAC1C,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,EAAE;QACxC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;QAClD,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;KACnD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,qBAAqB,CAAC"}