@vorionsys/platform-core 0.1.0

package/dist/trust-engine/context.d.ts

@@ -0,0 +1,198 @@
+/**
+ * Deployment Context
+ *
+ * Context dimension sets policy constraints per deployment environment.
+ * Different deployment contexts have different risk profiles and
+ * regulatory requirements that limit maximum trust levels.
+ *
+ * The context ceiling is a deployment-specific policy that cannot be
+ * exceeded regardless of certification or behavioral trust.
+ *
+ * @packageDocumentation
+ */
+import type { TrustScore } from '../common/types.js';
+import { z } from 'zod';
+/**
+ * Runtime tier type (T0-T7)
+ */
+export type RuntimeTier = 0 | 1 | 2 | 3 | 4 | 5 | 6 | 7;
+/**
+ * Deployment Context Enum
+ *
+ * Defines the deployment environments with their trust policy constraints.
+ * Uses 8-tier model (T0-T7).
+ */
+export declare enum DeploymentContext {
+    /**
+     * C_LOCAL: Developer machine
+     * - Personal development environment
+     * - No policy restrictions
+     * - Maximum trust: T7 Autonomous (no limit)
+     */
+    C_LOCAL = "local",
+    /**
+     * C_TEAM: Team environment
+     * - Shared team development/staging
+     * - Standard security policies
+     * - Maximum trust: T6 Certified
+     */
+    C_TEAM = "team",
+    /**
+     * C_ENTERPRISE: Enterprise SaaS
+     * - Production enterprise deployment
+     * - Corporate security policies
+     * - Maximum trust: T5 Trusted
+     */
+    C_ENTERPRISE = "enterprise",
+    /**
+     * C_REGULATED: Regulated industry
+     * - Financial, healthcare, etc.
+     * - Strict compliance requirements
+     * - Maximum trust: T4 Standard (without human approval)
+     * - Requires human-in-the-loop for higher actions
+     */
+    C_REGULATED = "regulated",
+    /**
+     * C_SOVEREIGN: Government/defense
+     * - Government or military deployments
+     * - Highest security requirements
+     * - Maximum trust: T6 Certified (with hardware attestation)
+     * - Requires attestation for trusted operations
+     */
+    C_SOVEREIGN = "sovereign"
+}
+/**
+ * Context ceiling configuration
+ */
+export interface ContextCeiling {
+    /** Maximum tier allowed in this context */
+    maxTier: RuntimeTier;
+    /** Maximum score allowed */
+    maxScore: number;
+    /** Whether human approval is required for actions above base tier */
+    requiresHuman?: boolean;
+    /** Tier at which human approval becomes required */
+    humanRequiredAboveTier?: RuntimeTier;
+    /** Whether hardware attestation is required */
+    requiresAttestation?: boolean;
+    /** Human-readable description */
+    description: string;
+}
+/**
+ * Context policy evaluation result
+ */
+export interface ContextPolicyResult {
+    /** Whether the action is allowed under context policy */
+    allowed: boolean;
+    /** Effective maximum tier after policy */
+    maxTier: RuntimeTier;
+    /** Maximum score after policy */
+    maxScore: number;
+    /** Whether human approval is needed */
+    humanApprovalRequired: boolean;
+    /** Whether attestation is needed */
+    attestationRequired: boolean;
+    /** Reason for any restrictions */
+    reason?: string;
+}
+/**
+ * Context ceiling definitions (8-tier model T0-T7)
+ *
+ * Maps each deployment context to its trust policy constraints.
+ */
+export declare const CONTEXT_CEILINGS: Record<DeploymentContext, ContextCeiling>;
+/**
+ * Context names for display
+ */
+export declare const CONTEXT_NAMES: Record<DeploymentContext, string>;
+/**
+ * Schema for DeploymentContext validation
+ */
+export declare const DeploymentContextSchema: z.ZodNativeEnum<typeof DeploymentContext>;
+/**
+ * Schema for context configuration
+ */
+export declare const ContextConfigSchema: z.ZodObject<{
+    context: z.ZodNativeEnum<typeof DeploymentContext>;
+    customMaxTier: z.ZodOptional<z.ZodNumber>;
+    customMaxScore: z.ZodOptional<z.ZodNumber>;
+    humanApprovalEnabled: z.ZodOptional<z.ZodBoolean>;
+    attestationEnabled: z.ZodOptional<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    context?: DeploymentContext;
+    customMaxTier?: number;
+    customMaxScore?: number;
+    humanApprovalEnabled?: boolean;
+    attestationEnabled?: boolean;
+}, {
+    context?: DeploymentContext;
+    customMaxTier?: number;
+    customMaxScore?: number;
+    humanApprovalEnabled?: boolean;
+    attestationEnabled?: boolean;
+}>;
+export type ContextConfig = z.infer<typeof ContextConfigSchema>;
+/**
+ * Get the trust ceiling for a deployment context
+ *
+ * @param context - The deployment context
+ * @returns The maximum runtime tier allowed
+ */
+export declare function getContextCeiling(context: DeploymentContext): RuntimeTier;
+/**
+ * Get the maximum score for a deployment context
+ *
+ * @param context - The deployment context
+ * @returns The maximum trust score allowed
+ */
+export declare function getContextMaxScore(context: DeploymentContext): number;
+/**
+ * Apply context ceiling to a trust score
+ *
+ * @param score - The trust score to check
+ * @param context - The deployment context
+ * @returns The score, capped at the context ceiling
+ */
+export declare function applyContextCeiling(score: TrustScore, context: DeploymentContext): TrustScore;
+/**
+ * Check if human approval is required for an action
+ *
+ * @param context - The deployment context
+ * @param requestedTier - The trust tier being requested
+ * @returns True if human approval is required
+ */
+export declare function requiresHumanApproval(context: DeploymentContext, requestedTier: RuntimeTier): boolean;
+/**
+ * Check if attestation is required for an action
+ *
+ * @param context - The deployment context
+ * @returns True if hardware attestation is required
+ */
+export declare function requiresAttestation(context: DeploymentContext): boolean;
+/**
+ * Evaluate context policy for a requested action
+ *
+ * @param context - The deployment context
+ * @param requestedTier - The trust tier being requested
+ * @param hasHumanApproval - Whether human approval has been obtained
+ * @param hasAttestation - Whether hardware attestation is present
+ * @returns Policy evaluation result
+ */
+export declare function evaluateContextPolicy(context: DeploymentContext, requestedTier: RuntimeTier, hasHumanApproval?: boolean, hasAttestation?: boolean): ContextPolicyResult;
+/**
+ * Get human-readable description of context constraints
+ *
+ * @param context - The deployment context
+ * @returns Description of the policy implications
+ */
+export declare function describeContextConstraints(context: DeploymentContext): string;
+/**
+ * Determine deployment context from environment
+ *
+ * Analyzes environment variables and configuration to determine
+ * the appropriate deployment context.
+ *
+ * @returns The detected deployment context
+ */
+export declare function detectDeploymentContext(): DeploymentContext;
+//# sourceMappingURL=context.d.ts.map

package/dist/trust-engine/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/trust-engine/context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAExD;;;;;GAKG;AACH,oBAAY,iBAAiB;IAC3B;;;;;OAKG;IACH,OAAO,UAAU;IAEjB;;;;;OAKG;IACH,MAAM,SAAS;IAEf;;;;;OAKG;IACH,YAAY,eAAe;IAE3B;;;;;;OAMG;IACH,WAAW,cAAc;IAEzB;;;;;;OAMG;IACH,WAAW,cAAc;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,2CAA2C;IAC3C,OAAO,EAAE,WAAW,CAAC;IACrB,4BAA4B;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,oDAAoD;IACpD,sBAAsB,CAAC,EAAE,WAAW,CAAC;IACrC,+CAA+C;IAC/C,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,yDAAyD;IACzD,OAAO,EAAE,OAAO,CAAC;IACjB,0CAA0C;IAC1C,OAAO,EAAE,WAAW,CAAC;IACrB,iCAAiC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,uCAAuC;IACvC,qBAAqB,EAAE,OAAO,CAAC;IAC/B,oCAAoC;IACpC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,kCAAkC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAMD;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,iBAAiB,EAAE,cAAc,CA6BtE,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAM3D,CAAC;AAMF;;GAEG;AACH,eAAO,MAAM,uBAAuB,2CAAkC,CAAC;AAEvE;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;EAM9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAMhE;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,GAAG,WAAW,CAEzE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,iBAAiB,GAAG,MAAM,CAErE;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,iBAAiB,GACzB,UAAU,CAiBZ;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,iBAAiB,EAC1B,aAAa,EAAE,WAAW,GACzB,OAAO,CAST;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAEvE;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,iBAAiB,EAC1B,aAAa,EAAE,WAAW,EAC1B,gBAAgB,GAAE,OAAe,EACjC,cAAc,GAAE,OAAe,GAC9B,mBAAmB,CA8CrB;AAsBD;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,iBAAiB,GAAG,MAAM,CAa7E;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,IAAI,iBAAiB,CAyB3D"}

package/dist/trust-engine/context.js

@@ -0,0 +1,308 @@
+/**
+ * Deployment Context
+ *
+ * Context dimension sets policy constraints per deployment environment.
+ * Different deployment contexts have different risk profiles and
+ * regulatory requirements that limit maximum trust levels.
+ *
+ * The context ceiling is a deployment-specific policy that cannot be
+ * exceeded regardless of certification or behavioral trust.
+ *
+ * @packageDocumentation
+ */
+import { createLogger } from '../common/logger.js';
+import { z } from 'zod';
+const logger = createLogger({ component: 'deployment-context' });
+/**
+ * Deployment Context Enum
+ *
+ * Defines the deployment environments with their trust policy constraints.
+ * Uses 8-tier model (T0-T7).
+ */
+export var DeploymentContext;
+(function (DeploymentContext) {
+    /**
+     * C_LOCAL: Developer machine
+     * - Personal development environment
+     * - No policy restrictions
+     * - Maximum trust: T7 Autonomous (no limit)
+     */
+    DeploymentContext["C_LOCAL"] = "local";
+    /**
+     * C_TEAM: Team environment
+     * - Shared team development/staging
+     * - Standard security policies
+     * - Maximum trust: T6 Certified
+     */
+    DeploymentContext["C_TEAM"] = "team";
+    /**
+     * C_ENTERPRISE: Enterprise SaaS
+     * - Production enterprise deployment
+     * - Corporate security policies
+     * - Maximum trust: T5 Trusted
+     */
+    DeploymentContext["C_ENTERPRISE"] = "enterprise";
+    /**
+     * C_REGULATED: Regulated industry
+     * - Financial, healthcare, etc.
+     * - Strict compliance requirements
+     * - Maximum trust: T4 Standard (without human approval)
+     * - Requires human-in-the-loop for higher actions
+     */
+    DeploymentContext["C_REGULATED"] = "regulated";
+    /**
+     * C_SOVEREIGN: Government/defense
+     * - Government or military deployments
+     * - Highest security requirements
+     * - Maximum trust: T6 Certified (with hardware attestation)
+     * - Requires attestation for trusted operations
+     */
+    DeploymentContext["C_SOVEREIGN"] = "sovereign";
+})(DeploymentContext || (DeploymentContext = {}));
+// ============================================================================
+// Constants
+// ============================================================================
+/**
+ * Context ceiling definitions (8-tier model T0-T7)
+ *
+ * Maps each deployment context to its trust policy constraints.
+ */
+export const CONTEXT_CEILINGS = {
+    [DeploymentContext.C_LOCAL]: {
+        maxTier: 7, // T7 Autonomous
+        maxScore: 1000,
+        description: 'Local development - no restrictions',
+    },
+    [DeploymentContext.C_TEAM]: {
+        maxTier: 6, // T6 Certified
+        maxScore: 950,
+        description: 'Team environment - certified operations allowed',
+    },
+    [DeploymentContext.C_ENTERPRISE]: {
+        maxTier: 5, // T5 Trusted
+        maxScore: 875,
+        description: 'Enterprise SaaS - standard corporate policies',
+    },
+    [DeploymentContext.C_REGULATED]: {
+        maxTier: 4, // T4 Standard
+        maxScore: 799,
+        requiresHuman: true,
+        humanRequiredAboveTier: 4,
+        description: 'Regulated industry - human approval for trusted actions',
+    },
+    [DeploymentContext.C_SOVEREIGN]: {
+        maxTier: 6, // T6 Certified (with attestation)
+        maxScore: 950,
+        requiresAttestation: true,
+        description: 'Sovereign - hardware attestation required for trust',
+    },
+};
+/**
+ * Context names for display
+ */
+export const CONTEXT_NAMES = {
+    [DeploymentContext.C_LOCAL]: 'Local Development',
+    [DeploymentContext.C_TEAM]: 'Team Environment',
+    [DeploymentContext.C_ENTERPRISE]: 'Enterprise',
+    [DeploymentContext.C_REGULATED]: 'Regulated Industry',
+    [DeploymentContext.C_SOVEREIGN]: 'Sovereign/Government',
+};
+// ============================================================================
+// Zod Schemas for Validation
+// ============================================================================
+/**
+ * Schema for DeploymentContext validation
+ */
+export const DeploymentContextSchema = z.nativeEnum(DeploymentContext);
+/**
+ * Schema for context configuration
+ */
+export const ContextConfigSchema = z.object({
+    context: DeploymentContextSchema,
+    customMaxTier: z.number().int().min(0).max(7).optional(),
+    customMaxScore: z.number().int().min(0).max(1000).optional(),
+    humanApprovalEnabled: z.boolean().optional(),
+    attestationEnabled: z.boolean().optional(),
+});
+// ============================================================================
+// Functions
+// ============================================================================
+/**
+ * Get the trust ceiling for a deployment context
+ *
+ * @param context - The deployment context
+ * @returns The maximum runtime tier allowed
+ */
+export function getContextCeiling(context) {
+    return CONTEXT_CEILINGS[context].maxTier;
+}
+/**
+ * Get the maximum score for a deployment context
+ *
+ * @param context - The deployment context
+ * @returns The maximum trust score allowed
+ */
+export function getContextMaxScore(context) {
+    return CONTEXT_CEILINGS[context].maxScore;
+}
+/**
+ * Apply context ceiling to a trust score
+ *
+ * @param score - The trust score to check
+ * @param context - The deployment context
+ * @returns The score, capped at the context ceiling
+ */
+export function applyContextCeiling(score, context) {
+    const ceiling = CONTEXT_CEILINGS[context];
+    const result = Math.min(score, ceiling.maxScore);
+    if (result < score) {
+        logger.debug({
+            originalScore: score,
+            cappedScore: result,
+            context: CONTEXT_NAMES[context],
+            maxScore: ceiling.maxScore,
+        }, 'Applied context ceiling to trust score');
+    }
+    return result;
+}
+/**
+ * Check if human approval is required for an action
+ *
+ * @param context - The deployment context
+ * @param requestedTier - The trust tier being requested
+ * @returns True if human approval is required
+ */
+export function requiresHumanApproval(context, requestedTier) {
+    const ceiling = CONTEXT_CEILINGS[context];
+    if (!ceiling.requiresHuman) {
+        return false;
+    }
+    const threshold = ceiling.humanRequiredAboveTier ?? ceiling.maxTier;
+    return requestedTier > threshold;
+}
+/**
+ * Check if attestation is required for an action
+ *
+ * @param context - The deployment context
+ * @returns True if hardware attestation is required
+ */
+export function requiresAttestation(context) {
+    return CONTEXT_CEILINGS[context].requiresAttestation ?? false;
+}
+/**
+ * Evaluate context policy for a requested action
+ *
+ * @param context - The deployment context
+ * @param requestedTier - The trust tier being requested
+ * @param hasHumanApproval - Whether human approval has been obtained
+ * @param hasAttestation - Whether hardware attestation is present
+ * @returns Policy evaluation result
+ */
+export function evaluateContextPolicy(context, requestedTier, hasHumanApproval = false, hasAttestation = false) {
+    const ceiling = CONTEXT_CEILINGS[context];
+    let effectiveMaxTier = ceiling.maxTier;
+    let effectiveMaxScore = ceiling.maxScore;
+    const reasons = [];
+    // Check attestation requirement
+    if (ceiling.requiresAttestation && !hasAttestation) {
+        // Without attestation in sovereign context, limit trust significantly
+        effectiveMaxTier = Math.min(effectiveMaxTier, 2);
+        effectiveMaxScore = Math.min(effectiveMaxScore, 599);
+        reasons.push('Attestation required for higher trust in sovereign context');
+    }
+    // Check human approval requirement
+    const needsHuman = requiresHumanApproval(context, requestedTier);
+    if (needsHuman && !hasHumanApproval) {
+        // Without human approval in regulated context, limit to threshold
+        const threshold = ceiling.humanRequiredAboveTier ?? ceiling.maxTier;
+        effectiveMaxTier = Math.min(effectiveMaxTier, threshold);
+        effectiveMaxScore = Math.min(effectiveMaxScore, tierToMaxScore(threshold));
+        reasons.push('Human approval required for autonomous actions in regulated context');
+    }
+    const allowed = requestedTier <= effectiveMaxTier;
+    logger.debug({
+        context: CONTEXT_NAMES[context],
+        requestedTier,
+        effectiveMaxTier,
+        allowed,
+        hasHumanApproval,
+        hasAttestation,
+    }, 'Evaluated context policy');
+    return {
+        allowed,
+        maxTier: effectiveMaxTier,
+        maxScore: effectiveMaxScore,
+        humanApprovalRequired: needsHuman && !hasHumanApproval,
+        attestationRequired: (ceiling.requiresAttestation ?? false) && !hasAttestation,
+        reason: reasons.length > 0 ? reasons.join('; ') : undefined,
+    };
+}
+/**
+ * Convert tier to maximum score for that tier (8-tier model)
+ *
+ * @param tier - Runtime tier (T0-T7)
+ * @returns Maximum score for the tier
+ */
+function tierToMaxScore(tier) {
+    const tierMaxScores = {
+        0: 199, // T0 Sandbox
+        1: 349, // T1 Observed
+        2: 499, // T2 Provisional
+        3: 649, // T3 Monitored
+        4: 799, // T4 Standard
+        5: 875, // T5 Trusted
+        6: 950, // T6 Certified
+        7: 1000, // T7 Autonomous
+    };
+    return tierMaxScores[tier];
+}
+/**
+ * Get human-readable description of context constraints
+ *
+ * @param context - The deployment context
+ * @returns Description of the policy implications
+ */
+export function describeContextConstraints(context) {
+    const ceiling = CONTEXT_CEILINGS[context];
+    const name = CONTEXT_NAMES[context];
+    let description = `${name}: ${ceiling.description} (max T${ceiling.maxTier})`;
+    if (ceiling.requiresHuman) {
+        description += ` [Human approval required above T${ceiling.humanRequiredAboveTier ?? ceiling.maxTier}]`;
+    }
+    if (ceiling.requiresAttestation) {
+        description += ' [Hardware attestation required]';
+    }
+    return description;
+}
+/**
+ * Determine deployment context from environment
+ *
+ * Analyzes environment variables and configuration to determine
+ * the appropriate deployment context.
+ *
+ * @returns The detected deployment context
+ */
+export function detectDeploymentContext() {
+    const env = process.env['VORION_DEPLOYMENT_CONTEXT'];
+    if (env && Object.values(DeploymentContext).includes(env)) {
+        return env;
+    }
+    // Infer from NODE_ENV and other indicators
+    const nodeEnv = process.env['NODE_ENV'];
+    const isRegulated = process.env['VORION_REGULATED'] === 'true';
+    const isSovereign = process.env['VORION_SOVEREIGN'] === 'true';
+    if (isSovereign) {
+        return DeploymentContext.C_SOVEREIGN;
+    }
+    if (isRegulated) {
+        return DeploymentContext.C_REGULATED;
+    }
+    if (nodeEnv === 'production') {
+        return DeploymentContext.C_ENTERPRISE;
+    }
+    if (nodeEnv === 'staging' || nodeEnv === 'test') {
+        return DeploymentContext.C_TEAM;
+    }
+    return DeploymentContext.C_LOCAL;
+}
+//# sourceMappingURL=context.js.map

package/dist/trust-engine/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/trust-engine/context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,oBAAoB,EAAE,CAAC,CAAC;AAWjE;;;;;GAKG;AACH,MAAM,CAAN,IAAY,iBA0CX;AA1CD,WAAY,iBAAiB;IAC3B;;;;;OAKG;IACH,sCAAiB,CAAA;IAEjB;;;;;OAKG;IACH,oCAAe,CAAA;IAEf;;;;;OAKG;IACH,gDAA2B,CAAA;IAE3B;;;;;;OAMG;IACH,8CAAyB,CAAA;IAEzB;;;;;;OAMG;IACH,8CAAyB,CAAA;AAC3B,CAAC,EA1CW,iBAAiB,KAAjB,iBAAiB,QA0C5B;AAsCD,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA8C;IACzE,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE;QAC3B,OAAO,EAAE,CAAC,EAAG,gBAAgB;QAC7B,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,qCAAqC;KACnD;IACD,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE;QAC1B,OAAO,EAAE,CAAC,EAAG,eAAe;QAC5B,QAAQ,EAAE,GAAG;QACb,WAAW,EAAE,iDAAiD;KAC/D;IACD,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE;QAChC,OAAO,EAAE,CAAC,EAAG,aAAa;QAC1B,QAAQ,EAAE,GAAG;QACb,WAAW,EAAE,+CAA+C;KAC7D;IACD,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE;QAC/B,OAAO,EAAE,CAAC,EAAG,cAAc;QAC3B,QAAQ,EAAE,GAAG;QACb,aAAa,EAAE,IAAI;QACnB,sBAAsB,EAAE,CAAC;QACzB,WAAW,EAAE,yDAAyD;KACvE;IACD,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE;QAC/B,OAAO,EAAE,CAAC,EAAG,kCAAkC;QAC/C,QAAQ,EAAE,GAAG;QACb,mBAAmB,EAAE,IAAI;QACzB,WAAW,EAAE,qDAAqD;KACnE;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAsC;IAC9D,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,mBAAmB;IAChD,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,kBAAkB;IAC9C,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,YAAY;IAC9C,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,oBAAoB;IACrD,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,sBAAsB;CACxD,CAAC;AAEF,+EAA+E;AAC/E,6BAA6B;AAC7B,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;AAEvE;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,OAAO,EAAE,uBAAuB;IAChC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC5D,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5C,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC;AAIH,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAA0B;IAC1D,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA0B;IAC3D,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;AAC5C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAiB,EACjB,OAA0B;IAE1B,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEjD,IAAI,MAAM,GAAG,KAAK,EAAE,CAAC;QACnB,MAAM,CAAC,KAAK,CACV;YACE,aAAa,EAAE,KAAK;YACpB,WAAW,EAAE,MAAM;YACnB,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC;YAC/B,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,EACD,wCAAwC,CACzC,CAAC;IACJ,CAAC;IAED,OAAO,MAAoB,CAAC;AAC9B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAA0B,EAC1B,aAA0B;IAE1B,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAE1C,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,sBAAsB,IAAI,OAAO,CAAC,OAAO,CAAC;IACpE,OAAO,aAAa,GAAG,SAAS,CAAC;AACnC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAA0B;IAC5D,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC,mBAAmB,IAAI,KAAK,CAAC;AAChE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAA0B,EAC1B,aAA0B,EAC1B,mBAA4B,KAAK,EACjC,iBAA0B,KAAK;IAE/B,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;IACvC,IAAI,iBAAiB,GAAG,OAAO,CAAC,QAAQ,CAAC;IACzC,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,gCAAgC;IAChC,IAAI,OAAO,CAAC,mBAAmB,IAAI,CAAC,cAAc,EAAE,CAAC;QACnD,sEAAsE;QACtE,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAgB,CAAC;QAChE,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;QACrD,OAAO,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;IAC7E,CAAC;IAED,mCAAmC;IACnC,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACjE,IAAI,UAAU,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACpC,kEAAkE;QAClE,MAAM,SAAS,GAAG,OAAO,CAAC,sBAAsB,IAAI,OAAO,CAAC,OAAO,CAAC;QACpE,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAgB,CAAC;QACxE,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3E,OAAO,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,IAAI,gBAAgB,CAAC;IAElD,MAAM,CAAC,KAAK,CACV;QACE,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC;QAC/B,aAAa;QACb,gBAAgB;QAChB,OAAO;QACP,gBAAgB;QAChB,cAAc;KACf,EACD,0BAA0B,CAC3B,CAAC;IAEF,OAAO;QACL,OAAO;QACP,OAAO,EAAE,gBAAgB;QACzB,QAAQ,EAAE,iBAAiB;QAC3B,qBAAqB,EAAE,UAAU,IAAI,CAAC,gBAAgB;QACtD,mBAAmB,EAAE,CAAC,OAAO,CAAC,mBAAmB,IAAI,KAAK,CAAC,IAAI,CAAC,cAAc;QAC9E,MAAM,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KAC5D,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,IAAiB;IACvC,MAAM,aAAa,GAAgC;QACjD,CAAC,EAAE,GAAG,EAAI,aAAa;QACvB,CAAC,EAAE,GAAG,EAAI,cAAc;QACxB,CAAC,EAAE,GAAG,EAAI,iBAAiB;QAC3B,CAAC,EAAE,GAAG,EAAI,eAAe;QACzB,CAAC,EAAE,GAAG,EAAI,cAAc;QACxB,CAAC,EAAE,GAAG,EAAI,aAAa;QACvB,CAAC,EAAE,GAAG,EAAI,eAAe;QACzB,CAAC,EAAE,IAAI,EAAG,gBAAgB;KAC3B,CAAC;IACF,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAA0B;IACnE,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,WAAW,GAAG,GAAG,IAAI,KAAK,OAAO,CAAC,WAAW,UAAU,OAAO,CAAC,OAAO,GAAG,CAAC;IAE9E,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,WAAW,IAAI,oCAAoC,OAAO,CAAC,sBAAsB,IAAI,OAAO,CAAC,OAAO,GAAG,CAAC;IAC1G,CAAC;IACD,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAChC,WAAW,IAAI,kCAAkC,CAAC;IACpD,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB;IACrC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IACrD,IAAI,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CAAC,GAAwB,CAAC,EAAE,CAAC;QAC/E,OAAO,GAAwB,CAAC;IAClC,CAAC;IAED,2CAA2C;IAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,KAAK,MAAM,CAAC;IAC/D,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,KAAK,MAAM,CAAC;IAE/D,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,iBAAiB,CAAC,WAAW,CAAC;IACvC,CAAC;IACD,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,iBAAiB,CAAC,WAAW,CAAC;IACvC,CAAC;IACD,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;QAC7B,OAAO,iBAAiB,CAAC,YAAY,CAAC;IACxC,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QAChD,OAAO,iBAAiB,CAAC,MAAM,CAAC;IAClC,CAAC;IAED,OAAO,iBAAiB,CAAC,OAAO,CAAC;AACnC,CAAC"}

package/dist/trust-engine/diminishing-returns.d.ts

@@ -0,0 +1,123 @@
+/**
+ * Diminishing Returns for Trust Signals
+ *
+ * Prevents gaming by reducing the impact of repeated same-type signals.
+ * Each subsequent signal of the same type/source within a window has
+ * progressively reduced weight.
+ *
+ * @packageDocumentation
+ */
+import type { TrustSignal as TrustSignalType } from '../common/types.js';
+/**
+ * Diminishing returns configuration
+ */
+export interface DiminishingReturnsConfig {
+    /** Time window in milliseconds for tracking repeated signals (default: 7 days) */
+    windowMs: number;
+    /** Weight factors for 1st, 2nd, 3rd, 4th+ signals of same type */
+    diminishingFactors: [number, number, number, number];
+    /** Whether to track by source in addition to type */
+    trackBySource: boolean;
+}
+/**
+ * Default configuration
+ *
+ * - 7-day window for tracking repeats
+ * - 1st signal: 100%, 2nd: 70%, 3rd: 50%, 4th+: 30%
+ * - Track by type+source combination
+ */
+export declare const DEFAULT_DIMINISHING_CONFIG: DiminishingReturnsConfig;
+/**
+ * Tracks frequency of signal types within a window
+ */
+export interface SignalFrequencyMap {
+    /** Map of signal key to count within window */
+    counts: Map<string, number>;
+    /** Signals included in this frequency map */
+    signalIds: Set<string>;
+}
+/**
+ * Build a signal key for frequency tracking
+ *
+ * @param signal - The signal to key
+ * @param trackBySource - Whether to include source in key
+ */
+export declare function buildSignalKey(signal: TrustSignalType, trackBySource: boolean): string;
+/**
+ * Build frequency map from signals within time window
+ *
+ * @param signals - All signals to analyze (should be sorted by timestamp desc)
+ * @param config - Diminishing returns configuration
+ * @returns Frequency map with counts per signal type/source
+ */
+export declare function buildFrequencyMap(signals: TrustSignalType[], config?: DiminishingReturnsConfig): SignalFrequencyMap;
+/**
+ * Get the occurrence number for a signal (1st, 2nd, 3rd, etc. of its type)
+ *
+ * This counts how many signals of the same type occurred BEFORE this one
+ * within the window, to determine this signal's position.
+ *
+ * @param signal - The signal to check
+ * @param allSignals - All signals sorted by timestamp descending
+ * @param config - Diminishing returns configuration
+ * @returns 1-based occurrence number (1 = first of type, 2 = second, etc.)
+ */
+export declare function getSignalOccurrence(signal: TrustSignalType, allSignals: TrustSignalType[], config?: DiminishingReturnsConfig): number;
+/**
+ * Calculate diminished weight for a signal based on its occurrence
+ *
+ * @param occurrence - 1-based occurrence number (1 = first, 2 = second, etc.)
+ * @param baseWeight - Original signal weight
+ * @param config - Diminishing returns configuration
+ * @returns Adjusted weight after diminishing returns
+ */
+export declare function calculateDiminishedWeight(occurrence: number, baseWeight: number, config?: DiminishingReturnsConfig): number;
+/**
+ * Apply diminishing returns to a signal's weight
+ *
+ * Combines occurrence-based diminishing with the signal's base weight.
+ *
+ * @param signal - The signal to adjust
+ * @param allSignals - All signals for context (sorted by timestamp desc)
+ * @param config - Diminishing returns configuration
+ * @returns Adjusted weight
+ */
+export declare function applyDiminishingReturns(signal: TrustSignalType, allSignals: TrustSignalType[], config?: DiminishingReturnsConfig): number;
+/**
+ * Result of applying diminishing returns to signals
+ */
+export interface DiminishedSignalsResult {
+    /** Signals with adjusted weights */
+    signals: Array<TrustSignalType & {
+        diminishedWeight: number;
+        occurrence: number;
+    }>;
+    /** Summary statistics */
+    stats: {
+        totalSignals: number;
+        uniqueTypes: number;
+        avgDiminishment: number;
+        mostRepeatedType: string | null;
+        mostRepeatedCount: number;
+    };
+}
+/**
+ * Apply diminishing returns to all signals and return adjusted weights
+ *
+ * @param signals - Signals to process (will be sorted internally)
+ * @param config - Diminishing returns configuration
+ * @returns Signals with diminished weights and statistics
+ */
+export declare function processSignalsWithDiminishing(signals: TrustSignalType[], config?: DiminishingReturnsConfig): DiminishedSignalsResult;
+/**
+ * Calculate weighted average with diminishing returns applied
+ *
+ * This is the primary function to use in TrustEngine.averageSignalValue
+ *
+ * @param signals - Signals to average
+ * @param defaultValue - Default if no signals
+ * @param config - Diminishing returns configuration
+ * @returns Weighted average with diminishing returns applied
+ */
+export declare function averageWithDiminishing(signals: TrustSignalType[], defaultValue: number, config?: DiminishingReturnsConfig): number;
+//# sourceMappingURL=diminishing-returns.d.ts.map

package/dist/trust-engine/diminishing-returns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diminishing-returns.d.ts","sourceRoot":"","sources":["../../src/trust-engine/diminishing-returns.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,WAAW,IAAI,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAMzE;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,kFAAkF;IAClF,QAAQ,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,kBAAkB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACrD,qDAAqD;IACrD,aAAa,EAAE,OAAO,CAAC;CACxB;AAED;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,EAAE,wBAIxC,CAAC;AAMF;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,+CAA+C;IAC/C,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,6CAA6C;IAC7C,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACxB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,eAAe,EACvB,aAAa,EAAE,OAAO,GACrB,MAAM,CAKR;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,eAAe,EAAE,EAC1B,MAAM,GAAE,wBAAqD,GAC5D,kBAAkB,CAmBpB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,eAAe,EACvB,UAAU,EAAE,eAAe,EAAE,EAC7B,MAAM,GAAE,wBAAqD,GAC5D,MAAM,CAuBR;AAMD;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,MAAM,GAAE,wBAAqD,GAC5D,MAAM,CAKR;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,eAAe,EACvB,UAAU,EAAE,eAAe,EAAE,EAC7B,MAAM,GAAE,wBAAqD,GAC5D,MAAM,CAIR;AAMD;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,oCAAoC;IACpC,OAAO,EAAE,KAAK,CAAC,eAAe,GAAG;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnF,yBAAyB;IACzB,KAAK,EAAE;QACL,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,eAAe,EAAE,MAAM,CAAC;QACxB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;QAChC,iBAAiB,EAAE,MAAM,CAAC;KAC3B,CAAC;CACH;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,eAAe,EAAE,EAC1B,MAAM,GAAE,wBAAqD,GAC5D,uBAAuB,CA2CzB;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,eAAe,EAAE,EAC1B,YAAY,EAAE,MAAM,EACpB,MAAM,GAAE,wBAAqD,GAC5D,MAAM,CA4BR"}