@vorionsys/platform-core 0.1.0

package/dist/trust-engine/diminishing-returns.js

@@ -0,0 +1,197 @@
+/**
+ * Diminishing Returns for Trust Signals
+ *
+ * Prevents gaming by reducing the impact of repeated same-type signals.
+ * Each subsequent signal of the same type/source within a window has
+ * progressively reduced weight.
+ *
+ * @packageDocumentation
+ */
+/**
+ * Default configuration
+ *
+ * - 7-day window for tracking repeats
+ * - 1st signal: 100%, 2nd: 70%, 3rd: 50%, 4th+: 30%
+ * - Track by type+source combination
+ */
+export const DEFAULT_DIMINISHING_CONFIG = {
+    windowMs: 7 * 24 * 60 * 60 * 1000, // 7 days
+    diminishingFactors: [1.0, 0.7, 0.5, 0.3],
+    trackBySource: true,
+};
+/**
+ * Build a signal key for frequency tracking
+ *
+ * @param signal - The signal to key
+ * @param trackBySource - Whether to include source in key
+ */
+export function buildSignalKey(signal, trackBySource) {
+    if (trackBySource && signal.source) {
+        return `${signal.type}:${signal.source}`;
+    }
+    return signal.type;
+}
+/**
+ * Build frequency map from signals within time window
+ *
+ * @param signals - All signals to analyze (should be sorted by timestamp desc)
+ * @param config - Diminishing returns configuration
+ * @returns Frequency map with counts per signal type/source
+ */
+export function buildFrequencyMap(signals, config = DEFAULT_DIMINISHING_CONFIG) {
+    const counts = new Map();
+    const signalIds = new Set();
+    const now = Date.now();
+    const cutoff = now - config.windowMs;
+    for (const signal of signals) {
+        const signalTime = new Date(signal.timestamp).getTime();
+        // Only count signals within the window
+        if (signalTime < cutoff)
+            continue;
+        const key = buildSignalKey(signal, config.trackBySource);
+        const currentCount = counts.get(key) ?? 0;
+        counts.set(key, currentCount + 1);
+        signalIds.add(signal.id);
+    }
+    return { counts, signalIds };
+}
+/**
+ * Get the occurrence number for a signal (1st, 2nd, 3rd, etc. of its type)
+ *
+ * This counts how many signals of the same type occurred BEFORE this one
+ * within the window, to determine this signal's position.
+ *
+ * @param signal - The signal to check
+ * @param allSignals - All signals sorted by timestamp descending
+ * @param config - Diminishing returns configuration
+ * @returns 1-based occurrence number (1 = first of type, 2 = second, etc.)
+ */
+export function getSignalOccurrence(signal, allSignals, config = DEFAULT_DIMINISHING_CONFIG) {
+    const signalTime = new Date(signal.timestamp).getTime();
+    const cutoff = signalTime - config.windowMs;
+    const key = buildSignalKey(signal, config.trackBySource);
+    let occurrence = 1; // This signal is at least the 1st
+    for (const other of allSignals) {
+        if (other.id === signal.id)
+            continue;
+        const otherTime = new Date(other.timestamp).getTime();
+        // Only count signals before this one and within window
+        if (otherTime >= signalTime)
+            continue;
+        if (otherTime < cutoff)
+            continue;
+        const otherKey = buildSignalKey(other, config.trackBySource);
+        if (otherKey === key) {
+            occurrence++;
+        }
+    }
+    return occurrence;
+}
+// =============================================================================
+// DIMINISHING WEIGHT CALCULATION
+// =============================================================================
+/**
+ * Calculate diminished weight for a signal based on its occurrence
+ *
+ * @param occurrence - 1-based occurrence number (1 = first, 2 = second, etc.)
+ * @param baseWeight - Original signal weight
+ * @param config - Diminishing returns configuration
+ * @returns Adjusted weight after diminishing returns
+ */
+export function calculateDiminishedWeight(occurrence, baseWeight, config = DEFAULT_DIMINISHING_CONFIG) {
+    // occurrence is 1-based, factors array is 0-based
+    const index = Math.min(occurrence - 1, config.diminishingFactors.length - 1);
+    const factor = config.diminishingFactors[index] ?? config.diminishingFactors[3];
+    return baseWeight * factor;
+}
+/**
+ * Apply diminishing returns to a signal's weight
+ *
+ * Combines occurrence-based diminishing with the signal's base weight.
+ *
+ * @param signal - The signal to adjust
+ * @param allSignals - All signals for context (sorted by timestamp desc)
+ * @param config - Diminishing returns configuration
+ * @returns Adjusted weight
+ */
+export function applyDiminishingReturns(signal, allSignals, config = DEFAULT_DIMINISHING_CONFIG) {
+    const baseWeight = signal.weight ?? 1.0;
+    const occurrence = getSignalOccurrence(signal, allSignals, config);
+    return calculateDiminishedWeight(occurrence, baseWeight, config);
+}
+/**
+ * Apply diminishing returns to all signals and return adjusted weights
+ *
+ * @param signals - Signals to process (will be sorted internally)
+ * @param config - Diminishing returns configuration
+ * @returns Signals with diminished weights and statistics
+ */
+export function processSignalsWithDiminishing(signals, config = DEFAULT_DIMINISHING_CONFIG) {
+    // Sort by timestamp descending (most recent first)
+    const sorted = [...signals].sort((a, b) => new Date(b.timestamp).getTime() - new Date(a.timestamp).getTime());
+    const frequencyMap = buildFrequencyMap(sorted, config);
+    // Find most repeated type
+    let mostRepeatedType = null;
+    let mostRepeatedCount = 0;
+    for (const [type, count] of frequencyMap.counts) {
+        if (count > mostRepeatedCount) {
+            mostRepeatedType = type;
+            mostRepeatedCount = count;
+        }
+    }
+    // Process each signal
+    let totalDiminishment = 0;
+    const processed = sorted.map((signal) => {
+        const baseWeight = signal.weight ?? 1.0;
+        const occurrence = getSignalOccurrence(signal, sorted, config);
+        const diminishedWeight = calculateDiminishedWeight(occurrence, baseWeight, config);
+        totalDiminishment += baseWeight - diminishedWeight;
+        return {
+            ...signal,
+            diminishedWeight,
+            occurrence,
+        };
+    });
+    return {
+        signals: processed,
+        stats: {
+            totalSignals: signals.length,
+            uniqueTypes: frequencyMap.counts.size,
+            avgDiminishment: signals.length > 0 ? totalDiminishment / signals.length : 0,
+            mostRepeatedType,
+            mostRepeatedCount,
+        },
+    };
+}
+/**
+ * Calculate weighted average with diminishing returns applied
+ *
+ * This is the primary function to use in TrustEngine.averageSignalValue
+ *
+ * @param signals - Signals to average
+ * @param defaultValue - Default if no signals
+ * @param config - Diminishing returns configuration
+ * @returns Weighted average with diminishing returns applied
+ */
+export function averageWithDiminishing(signals, defaultValue, config = DEFAULT_DIMINISHING_CONFIG) {
+    if (signals.length === 0)
+        return defaultValue;
+    // Sort by timestamp descending
+    const sorted = [...signals].sort((a, b) => new Date(b.timestamp).getTime() - new Date(a.timestamp).getTime());
+    const now = Date.now();
+    let weightedSum = 0;
+    let totalWeight = 0;
+    for (const signal of sorted) {
+        // Time decay (182-day half-life)
+        const age = now - new Date(signal.timestamp).getTime();
+        const timeWeight = Math.exp(-age / (182 * 24 * 60 * 60 * 1000));
+        // Diminishing returns based on occurrence
+        const diminishedWeight = applyDiminishingReturns(signal, sorted, config);
+        // Combined weight = time decay × diminished signal weight
+        const combinedWeight = timeWeight * diminishedWeight;
+        weightedSum += signal.value * combinedWeight;
+        totalWeight += combinedWeight;
+    }
+    return totalWeight > 0 ? weightedSum / totalWeight : defaultValue;
+}
+//# sourceMappingURL=diminishing-returns.js.map

package/dist/trust-engine/diminishing-returns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diminishing-returns.js","sourceRoot":"","sources":["../../src/trust-engine/diminishing-returns.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAoBH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAA6B;IAClE,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,SAAS;IAC5C,kBAAkB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;IACxC,aAAa,EAAE,IAAI;CACpB,CAAC;AAgBF;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAuB,EACvB,aAAsB;IAEtB,IAAI,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACnC,OAAO,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAA0B,EAC1B,SAAmC,0BAA0B;IAE7D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC;IAErC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QAExD,uCAAuC;QACvC,IAAI,UAAU,GAAG,MAAM;YAAE,SAAS;QAElC,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QACzD,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC;QAClC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC/B,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAuB,EACvB,UAA6B,EAC7B,SAAmC,0BAA0B;IAE7D,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;IACxD,MAAM,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC5C,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IAEzD,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC,kCAAkC;IAEtD,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE;YAAE,SAAS;QAErC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QAEtD,uDAAuD;QACvD,IAAI,SAAS,IAAI,UAAU;YAAE,SAAS;QACtC,IAAI,SAAS,GAAG,MAAM;YAAE,SAAS;QAEjC,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QAC7D,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;YACrB,UAAU,EAAE,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,gFAAgF;AAChF,iCAAiC;AACjC,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CACvC,UAAkB,EAClB,UAAkB,EAClB,SAAmC,0BAA0B;IAE7D,kDAAkD;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC,EAAE,MAAM,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAE,CAAC;IACjF,OAAO,UAAU,GAAG,MAAM,CAAC;AAC7B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAuB,EACvB,UAA6B,EAC7B,SAAmC,0BAA0B;IAE7D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC;IACxC,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IACnE,OAAO,yBAAyB,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;AACnE,CAAC;AAsBD;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAC3C,OAA0B,EAC1B,SAAmC,0BAA0B;IAE7D,mDAAmD;IACnD,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAC5E,CAAC;IAEF,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEvD,0BAA0B;IAC1B,IAAI,gBAAgB,GAAkB,IAAI,CAAC;IAC3C,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;QAChD,IAAI,KAAK,GAAG,iBAAiB,EAAE,CAAC;YAC9B,gBAAgB,GAAG,IAAI,CAAC;YACxB,iBAAiB,GAAG,KAAK,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,sBAAsB;IACtB,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACtC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC;QACxC,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/D,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACnF,iBAAiB,IAAI,UAAU,GAAG,gBAAgB,CAAC;QAEnD,OAAO;YACL,GAAG,MAAM;YACT,gBAAgB;YAChB,UAAU;SACX,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,SAAS;QAClB,KAAK,EAAE;YACL,YAAY,EAAE,OAAO,CAAC,MAAM;YAC5B,WAAW,EAAE,YAAY,CAAC,MAAM,CAAC,IAAI;YACrC,eAAe,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC5E,gBAAgB;YAChB,iBAAiB;SAClB;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAA0B,EAC1B,YAAoB,EACpB,SAAmC,0BAA0B;IAE7D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC;IAE9C,+BAA+B;IAC/B,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAC5E,CAAC;IAEF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;QAC5B,iCAAiC;QACjC,MAAM,GAAG,GAAG,GAAG,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QACvD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QAEhE,0CAA0C;QAC1C,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAEzE,0DAA0D;QAC1D,MAAM,cAAc,GAAG,UAAU,GAAG,gBAAgB,CAAC;QAErD,WAAW,IAAI,MAAM,CAAC,KAAK,GAAG,cAAc,CAAC;QAC7C,WAAW,IAAI,cAAc,CAAC;IAChC,CAAC;IAED,OAAO,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC;AACpE,CAAC"}

package/dist/trust-engine/index.d.ts

@@ -0,0 +1,433 @@
+/**
+ * Trust Engine - Behavioral Trust Scoring
+ *
+ * Calculates and maintains trust scores for entities based on behavioral signals.
+ * Persists to PostgreSQL for durability.
+ *
+ * Supports the dual-layer certification/runtime model:
+ * - Certification Layer (CAR): Portable attestations that travel with agents
+ * - Runtime Layer (Vorion): Deployment-specific trust enforcement
+ *
+ * CAR = Categorical Agentic Registry (formerly ACI - Categorical Agentic Registry)
+ * Backwards-compatible ACI aliases are provided for migration.
+ *
+ * @packageDocumentation
+ */
+import { type Database } from '../common/db.js';
+import type { TrustScore, TrustLevel, TrustSignal as TrustSignalType, TrustComponents, ID } from '../common/types.js';
+import type { TenantContext } from '../common/tenant-context.js';
+/**
+ * Dependencies for TrustEngine
+ *
+ * Use these to inject dependencies for testing or custom configurations.
+ * If not provided, defaults to lazy initialization from global singletons.
+ */
+export interface TrustEngineDependencies {
+    /** Pre-initialized database instance (optional, will lazy-init if not provided) */
+    database?: Database;
+}
+/**
+ * Options for trust engine operations that require tenant context
+ *
+ * @deprecated Use TenantContext instead for better security.
+ *             This interface is maintained for backward compatibility.
+ */
+export interface TrustOperationOptions {
+    /** Tenant ID for multi-tenant isolation (REQUIRED for security) */
+    tenantId: ID;
+}
+import { CertificationTier, RuntimeTier, CapabilityLevel, type ParsedCAR, parseCAR, type CARIdentity, type ParsedACI, parseACI, type ACIIdentity } from '@vorionsys/contracts/car';
+import { type Attestation, type ACITrustContext } from './car-integration.js';
+import { ObservabilityClass, type ObservabilityMetadata } from './observability.js';
+import { DeploymentContext } from './context.js';
+import { initialFactorScores, type FactorCodeString } from '@vorionsys/basis';
+/**
+ * Trust level thresholds (T0-T7) — canonical 8-tier model
+ */
+export declare const TRUST_THRESHOLDS: Record<TrustLevel, {
+    min: number;
+    max: number;
+}>;
+/**
+ * Trust level names (T0-T7)
+ */
+export declare const TRUST_LEVEL_NAMES: Record<TrustLevel, string>;
+export declare const FACTOR_CODES: readonly ["CT-COMP", "CT-REL", "CT-OBS", "CT-TRANS", "CT-ACCT", "CT-SAFE", "CT-SEC", "CT-PRIV", "CT-ID", "OP-HUMAN", "OP-ALIGN", "OP-CONTEXT", "OP-STEW", "SF-HUM", "SF-ADAPT", "SF-LEARN"];
+export type FactorCode = FactorCodeString;
+export declare const FACTOR_WEIGHTS: Record<"CT-COMP" | "CT-REL" | "CT-OBS" | "CT-TRANS" | "CT-ACCT" | "CT-SAFE" | "CT-SEC" | "CT-PRIV" | "CT-ID" | "OP-HUMAN" | "OP-ALIGN" | "OP-CONTEXT" | "OP-STEW" | "SF-HUM" | "SF-ADAPT" | "SF-LEARN", number>;
+export { initialFactorScores };
+export declare const SIGNAL_PREFIX_TO_FACTORS: Record<string, ("CT-COMP" | "CT-REL" | "CT-OBS" | "CT-TRANS" | "CT-ACCT" | "CT-SAFE" | "CT-SEC" | "CT-PRIV" | "CT-ID" | "OP-HUMAN" | "OP-ALIGN" | "OP-CONTEXT" | "OP-STEW" | "SF-HUM" | "SF-ADAPT" | "SF-LEARN")[]>;
+/**
+ * @deprecated Use FACTOR_WEIGHTS for 16-factor scoring. Kept for backwards compatibility.
+ * Signal weights for score calculation
+ */
+export declare const SIGNAL_WEIGHTS: Record<keyof TrustComponents, number>;
+/**
+ * Decay milestone definition
+ */
+export interface DecayMilestone {
+    days: number;
+    multiplier: number;
+}
+/**
+ * Stepped decay milestones
+ *
+ * Trust decays incrementally based on days since last activity.
+ * 182-day half-life: after 182 days of inactivity, score is 50% of original.
+ *
+ * Steps 1-5: 6% drop each (100% → 70%)
+ * Steps 6-9: 5% drop each (70% → 50%)
+ *
+ * 9 milestones, simple and predictable.
+ */
+export declare const DECAY_MILESTONES: DecayMilestone[];
+/**
+ * Entity trust record
+ */
+export interface TrustRecord {
+    entityId: ID;
+    score: TrustScore;
+    level: TrustLevel;
+    /** @deprecated Use factorScores instead */
+    components: TrustComponents;
+    /** Per-factor scores (0.0 to 1.0) for each of the 16 trust factors */
+    factorScores: Record<string, number>;
+    signals: TrustSignalType[];
+    lastCalculatedAt: string;
+    lastActivityAt: string;
+    history: TrustHistoryEntry[];
+    decayApplied: boolean;
+    decayMultiplier: number;
+    baseScore: TrustScore;
+    nextMilestone: {
+        days: number;
+        multiplier: number;
+    } | null;
+}
+/**
+ * Trust history entry
+ */
+export interface TrustHistoryEntry {
+    score: TrustScore;
+    level: TrustLevel;
+    reason: string;
+    timestamp: string;
+}
+/**
+ * Trust calculation result
+ */
+export interface TrustCalculation {
+    score: TrustScore;
+    level: TrustLevel;
+    /** @deprecated Use factorScores */
+    components: TrustComponents;
+    /** Per-factor scores for all 16 trust factors */
+    factorScores: Record<string, number>;
+    factors: string[];
+}
+/**
+ * Trust Engine service with PostgreSQL persistence
+ *
+ * Uses stepped decay milestones (182-day half-life) for trust score degradation.
+ *
+ * SECURITY: All trust operations now require TenantContext for multi-tenant isolation.
+ * TenantContext can only be created from validated JWT tokens, preventing
+ * tenant ID injection attacks. Cross-tenant queries are prevented by validating
+ * entity ownership.
+ *
+ * @see DECAY_MILESTONES
+ * @see TenantContext in ../common/tenant-context.ts
+ */
+export declare class TrustEngine {
+    private db;
+    private initialized;
+    private injectedDb;
+    /**
+     * Entity-to-tenant mapping cache (in production, use Redis or dedicated table)
+     * This maps entityId -> tenantId for ownership validation
+     */
+    private entityTenantCache;
+    /**
+     * Create a new TrustEngine instance.
+     *
+     * @param deps - Optional dependencies for dependency injection.
+     *               If database is provided, it will be used immediately without lazy init.
+     *
+     * @example
+     * // Default usage (lazy initialization)
+     * const engine = new TrustEngine();
+     * await engine.initialize();
+     *
+     * @example
+     * // With dependency injection (for testing)
+     * const engine = new TrustEngine({ database: mockDb });
+     */
+    constructor(deps?: TrustEngineDependencies);
+    /**
+     * Validate that an entity belongs to the specified tenant
+     *
+     * SECURITY: This prevents cross-tenant data access by ensuring
+     * the requesting tenant owns the entity being accessed.
+     *
+     * @throws TrustEngineError if entity does not belong to tenant
+     */
+    private validateTenantOwnership;
+    /**
+     * Register entity-tenant association
+     * Call this when creating or importing entities
+     */
+    registerEntityTenant(entityId: ID, tenantId: ID): void;
+    /**
+     * Initialize the service
+     */
+    initialize(): Promise<void>;
+    /**
+     * Ensure service is initialized
+     */
+    private ensureInitialized;
+    /**
+     * Calculate trust score for an entity
+     *
+     * SECURITY: Requires TenantContext for multi-tenant isolation.
+     * TenantContext can only be created from validated JWT tokens.
+     *
+     * @param entityId - The entity to calculate trust for
+     * @param ctx - Validated tenant context from JWT (REQUIRED for security)
+     */
+    calculate(entityId: ID, ctx: TenantContext): Promise<TrustCalculation>;
+    /**
+     * Get trust score for an entity
+     *
+     * SECURITY: Requires TenantContext for multi-tenant isolation.
+     * TenantContext can only be created from validated JWT tokens.
+     *
+     * @param entityId - The entity to get trust score for
+     * @param ctx - Validated tenant context from JWT (REQUIRED for security)
+     */
+    getScore(entityId: ID, ctx: TenantContext): Promise<TrustRecord | undefined>;
+    /**
+     * Record a trust signal
+     *
+     * SECURITY: Requires TenantContext for multi-tenant isolation.
+     * TenantContext can only be created from validated JWT tokens.
+     *
+     * @param signal - The trust signal to record
+     * @param ctx - Validated tenant context from JWT (REQUIRED for security)
+     */
+    recordSignal(signal: TrustSignalType, ctx: TenantContext): Promise<void>;
+    /**
+     * Get trust history for an entity
+     *
+     * SECURITY: Requires TenantContext for multi-tenant isolation.
+     * TenantContext can only be created from validated JWT tokens.
+     *
+     * @param entityId - The entity to get history for
+     * @param ctx - Validated tenant context from JWT (REQUIRED for security)
+     * @param limit - Maximum number of history entries to return (default: 100)
+     */
+    getHistory(entityId: ID, ctx: TenantContext, limit?: number): Promise<TrustHistoryEntry[]>;
+    /**
+     * Initialize trust for a new entity
+     *
+     * SECURITY: Requires TenantContext for multi-tenant isolation.
+     * TenantContext can only be created from validated JWT tokens.
+     *
+     * @param entityId - The entity to initialize
+     * @param ctx - Validated tenant context from JWT (REQUIRED for security)
+     * @param initialLevel - Initial trust level (default: 1)
+     */
+    initializeEntity(entityId: ID, ctx: TenantContext, initialLevel?: TrustLevel): Promise<TrustRecord>;
+    /**
+     * Convert score to trust level
+     */
+    private scoreToLevel;
+    /**
+     * @deprecated Use calculateFactorScores for 16-factor model. Kept for backwards compatibility.
+     * Calculate component scores from signals
+     */
+    private calculateComponents;
+    /**
+     * Calculate per-factor scores from signals.
+     * Signals can use either:
+     *   - Factor code prefix (e.g. 'CT-COMP.success')
+     *   - Legacy bucket prefix (e.g. 'behavioral.success') — mapped to factors via SIGNAL_PREFIX_TO_FACTORS
+     */
+    private calculateFactorScores;
+    /**
+     * Calculate average signal value with default
+     */
+    private averageSignalValue;
+    /**
+     * Get significant factors affecting the score
+     */
+    private getSignificantFactors;
+    /**
+     * Create initial factor scores with all 16 factors at 0.5 (neutral)
+     */
+    private initialFactorScores;
+    /**
+     * Calculate decay multiplier based on days since last activity
+     *
+     * Uses stepped milestones with interpolation for smooth decay.
+     * 182-day half-life: after 182 days of inactivity, score is 50% of original.
+     */
+    private calculateDecayMultiplier;
+    /**
+     * Apply decay to a base score
+     */
+    private applyDecay;
+    /**
+     * Calculate days since last activity from a date
+     */
+    private calculateInactiveDays;
+    /**
+     * Get the next decay milestone for an entity
+     */
+    private getNextMilestone;
+    /**
+     * Get trust context with ACI integration
+     *
+     * Combines ACI identity with attestation-based certification and Vorion
+     * runtime layer to produce a complete trust context. The effective tier/score
+     * is the minimum of all contributing factors.
+     *
+     * IMPORTANT: Trust tier comes from attestations, NOT the CAR ID itself.
+     * The CAR ID is just an identifier; trust is computed at runtime.
+     *
+     * @param entityId - The entity to get trust context for
+     * @param carId - The CAR ID string for the entity
+     * @param attestation - Optional attestation for this entity
+     * @returns Complete CAR trust context with effective permissions
+     */
+    getACITrustContext(entityId: ID, carId: string, ctx: TenantContext, attestation?: Attestation): Promise<ACITrustContext>;
+    /**
+     * Apply ACI attestation as trust signal
+     *
+     * Converts an ACI attestation into a trust signal and applies it to
+     * the entity's trust record. Also enforces the certification floor -
+     * the entity's score cannot fall below their certified tier minimum.
+     *
+     * @param entityId - The entity to apply attestation to
+     * @param attestation - The ACI attestation record
+     */
+    applyAttestation(entityId: ID, attestation: Attestation, ctx: TenantContext): Promise<void>;
+    /**
+     * Check if action is allowed under effective permission
+     *
+     * Evaluates whether an entity has sufficient effective trust to perform
+     * an action requiring a specific tier and domains.
+     *
+     * @param entityId - The entity requesting the action
+     * @param carId - The entity's CAR ID string
+     * @param requiredTier - Minimum tier required for the action
+     * @param requiredDomains - Domains required for the action
+     * @returns Permission check result with reason if denied
+     */
+    checkEffectivePermission(entityId: ID, carId: string, tenantCtx: TenantContext, requiredTier: RuntimeTier, requiredDomains: string[]): Promise<{
+        allowed: boolean;
+        effectiveLevel: number;
+        reason?: string;
+    }>;
+    /**
+     * Set trust score directly with reason
+     *
+     * Used internally for applying floors and ceilings from ACI.
+     *
+     * @param entityId - The entity to update
+     * @param score - The new trust score
+     * @param reason - Reason for the change
+     * @param ctx - Validated tenant context from JWT (REQUIRED for security)
+     */
+    setScore(entityId: ID, score: TrustScore, reason: string, ctx: TenantContext): Promise<void>;
+    /**
+     * Get observability class for an entity
+     *
+     * Retrieves or determines the observability class from entity metadata.
+     *
+     * @param entityId - The entity to check
+     * @returns The entity's observability class
+     */
+    getObservabilityClass(entityId: ID): Promise<ObservabilityClass>;
+    /**
+     * Set observability metadata for an entity
+     *
+     * Updates the trust record with observability information that determines
+     * the entity's trust ceiling.
+     *
+     * @param entityId - The entity to update
+     * @param metadata - Observability metadata (class, attestation info, etc.)
+     * @returns True if update was successful
+     */
+    setObservabilityMetadata(entityId: ID, metadata: Partial<ObservabilityMetadata>): Promise<boolean>;
+    /**
+     * Get full observability metadata for an entity
+     *
+     * @param entityId - The entity to query
+     * @returns The observability metadata or undefined if not set
+     */
+    getObservabilityMetadata(entityId: ID): Promise<ObservabilityMetadata | undefined>;
+    /**
+     * Get deployment context for an entity
+     *
+     * Retrieves or determines the deployment context for trust calculations.
+     *
+     * @param entityId - The entity to check (may have context override)
+     * @returns The applicable deployment context
+     */
+    getDeploymentContext(_entityId: ID): Promise<DeploymentContext>;
+}
+/**
+ * Create a new Trust Engine instance with dependency injection.
+ *
+ * This is the preferred way to create trust engines in production code
+ * as it makes dependencies explicit and testable.
+ *
+ * @param deps - Optional dependencies. If database provided, skips lazy init.
+ * @returns Configured TrustEngine instance
+ *
+ * @example
+ * // Default usage (lazy initialization)
+ * const engine = createTrustEngine();
+ * await engine.initialize();
+ *
+ * @example
+ * // With custom dependencies (pre-initialized)
+ * const engine = createTrustEngine({ database: customDb });
+ */
+export declare function createTrustEngine(deps?: TrustEngineDependencies): TrustEngine;
+/**
+ * Calculate decay multiplier based on days since last activity
+ *
+ * Uses stepped milestones with linear interpolation for smooth decay.
+ *
+ * @param daysSinceLastActivity - Number of days since last trust-positive activity
+ * @returns Decay multiplier between 0.5 and 1.0
+ */
+export declare function calculateDecayMultiplier(daysSinceLastActivity: number): number;
+/**
+ * Apply decay multiplier to a base score
+ *
+ * @param baseScore - The undecayed trust score
+ * @param daysSinceLastActivity - Number of days since last activity
+ * @returns Decayed score (rounded to nearest integer)
+ */
+export declare function applyDecay(baseScore: number, daysSinceLastActivity: number): number;
+/**
+ * Get the next decay milestone for a given number of inactive days
+ *
+ * @param daysSinceLastActivity - Current days of inactivity
+ * @returns Next milestone or null if past final milestone
+ */
+export declare function getNextDecayMilestone(daysSinceLastActivity: number): DecayMilestone | null;
+export type { CertificationTier, RuntimeTier, CapabilityLevel, ParsedCAR, CARIdentity };
+export { parseCAR };
+export type { ParsedACI, ACIIdentity };
+export { parseACI };
+export type { CARTrustContext, Attestation, EffectivePermission, PermissionCheckResult, } from './car-integration.js';
+export type { ACITrustContext } from './car-integration.js';
+export { AttestationSchema, calculateEffectiveFromCAR, applyCARFloor, enforceCARCeiling, createCARTrustContext, calculateEffectiveFromACI, applyACIFloor, enforceACICeiling, createACITrustContext, attestationToTrustSignal, calculateEffectiveTier, calculateEffectiveScore, scoreToTier, certificationTierToMinScore, certificationTierToMaxScore, certificationTierToScore, tierToMinScore, competenceLevelToCeiling, determineCeilingReason, lookupCertificationTier, } from './car-integration.js';
+export { ObservabilityClass, OBSERVABILITY_CEILINGS, OBSERVABILITY_CLASS_NAMES, ObservabilityClassSchema, ObservabilityMetadataSchema, getObservabilityCeiling, getObservabilityMaxScore, applyObservabilityCeiling, isTierAllowedForObservability, getRequiredObservabilityForTier, determineObservabilityClass, describeObservabilityConstraints, } from './observability.js';
+export type { ObservabilityCeiling, ObservabilityMetadata, } from './observability.js';
+export { DeploymentContext, CONTEXT_CEILINGS, CONTEXT_NAMES, DeploymentContextSchema, ContextConfigSchema, getContextCeiling, getContextMaxScore, applyContextCeiling, requiresHumanApproval, requiresAttestation, evaluateContextPolicy, describeContextConstraints, detectDeploymentContext, } from './context.js';
+export type { ContextCeiling, ContextPolicyResult, ContextConfig, } from './context.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/trust-engine/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/trust-engine/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,EAAe,KAAK,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAU7D,OAAO,KAAK,EACV,UAAU,EACV,UAAU,EACV,WAAW,IAAI,eAAe,EAC9B,eAAe,EACf,EAAE,EACH,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAcjE;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,mFAAmF;IACnF,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAED;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,mEAAmE;IACnE,QAAQ,EAAE,EAAE,CAAC;CACd;AA6BD,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,eAAe,EAEf,KAAK,SAAS,EACd,QAAQ,EACR,KAAK,WAAW,EAEhB,KAAK,SAAS,EACd,QAAQ,EACR,KAAK,WAAW,EACjB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAGL,KAAK,WAAW,EAUhB,KAAK,eAAe,EAIrB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,kBAAkB,EAIlB,KAAK,qBAAqB,EAC3B,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,iBAAiB,EAKlB,MAAM,cAAc,CAAC;AACtB,OAAO,EAIL,mBAAmB,EACnB,KAAK,gBAAgB,EACtB,MAAM,kBAAkB,CAAC;AAI1B;;GAEG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,UAAU,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAS7E,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CASxD,CAAC;AAGF,eAAO,MAAM,YAAY,6LAAmB,CAAC;AAC7C,MAAM,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAC1C,eAAO,MAAM,cAAc,iNAAyB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAG/B,eAAO,MAAM,wBAAwB,qNAA0B,CAAC;AAEhE;;;GAGG;AACH,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,eAAe,EAAE,MAAM,CAKhE,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,gBAAgB,EAAE,cAAc,EAW5C,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,EAAE,CAAC;IACb,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE,UAAU,CAAC;IAClB,2CAA2C;IAC3C,UAAU,EAAE,eAAe,CAAC;IAC5B,sEAAsE;IACtE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAE7B,YAAY,EAAE,OAAO,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,UAAU,CAAC;IACtB,aAAa,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAC5D;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE,UAAU,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE,UAAU,CAAC;IAClB,mCAAmC;IACnC,UAAU,EAAE,eAAe,CAAC;IAC5B,iDAAiD;IACjD,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,EAAE,CAAyB;IACnC,OAAO,CAAC,WAAW,CAAkB;IACrC,OAAO,CAAC,UAAU,CAAyB;IAE3C;;;OAGG;IACH,OAAO,CAAC,iBAAiB,CAA0B;IAEnD;;;;;;;;;;;;;;OAcG;gBACS,IAAI,GAAE,uBAA4B;IAU9C;;;;;;;OAOG;YACW,uBAAuB;IA6BrC;;;OAGG;IACH,oBAAoB,CAAC,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,IAAI;IAKtD;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IASjC;;OAEG;YACW,iBAAiB;IAO/B;;;;;;;;OAQG;IACG,SAAS,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAyF5E;;;;;;;;OAQG;IACG,QAAQ,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IA8IlF;;;;;;;;OAQG;IACG,YAAY,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAyI9E;;;;;;;;;OASG;IACG,UAAU,CACd,QAAQ,EAAE,EAAE,EACZ,GAAG,EAAE,aAAa,EAClB,KAAK,GAAE,MAAY,GAClB,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAmC/B;;;;;;;;;OASG;IACG,gBAAgB,CACpB,QAAQ,EAAE,EAAE,EACZ,GAAG,EAAE,aAAa,EAClB,YAAY,GAAE,UAAc,GAC3B,OAAO,CAAC,WAAW,CAAC;IAkFvB;;OAEG;IACH,OAAO,CAAC,YAAY;IASpB;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAe3B;;;;;OAKG;IACH,OAAO,CAAC,qBAAqB;IAoC7B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAwB1B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAmB7B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAQ3B;;;;;OAKG;IACH,OAAO,CAAC,wBAAwB;IA0BhC;;OAEG;IACH,OAAO,CAAC,UAAU;IAKlB;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAO7B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAexB;;;;;;;;;;;;;;OAcG;IACG,kBAAkB,CACtB,QAAQ,EAAE,EAAE,EACZ,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,aAAa,EAClB,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,eAAe,CAAC;IAmD3B;;;;;;;;;OASG;IACG,gBAAgB,CAAC,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IA2CjG;;;;;;;;;;;OAWG;IACG,wBAAwB,CAC5B,QAAQ,EAAE,EAAE,EACZ,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,aAAa,EACxB,YAAY,EAAE,WAAW,EACzB,eAAe,EAAE,MAAM,EAAE,GACxB,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAgDzE;;;;;;;;;OASG;IACG,QAAQ,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAoDlG;;;;;;;OAOG;IACG,qBAAqB,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAiCtE;;;;;;;;;OASG;IACG,wBAAwB,CAC5B,QAAQ,EAAE,EAAE,EACZ,QAAQ,EAAE,OAAO,CAAC,qBAAqB,CAAC,GACvC,OAAO,CAAC,OAAO,CAAC;IAwDnB;;;;;OAKG;IACG,wBAAwB,CAC5B,QAAQ,EAAE,EAAE,GACX,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC;IA2B7C;;;;;;;OAOG;IACG,oBAAoB,CAAC,SAAS,EAAE,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAOtE;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,GAAE,uBAA4B,GACjC,WAAW,CAEb;AAMD;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,qBAAqB,EAAE,MAAM,GAAG,MAAM,CAwB9E;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,qBAAqB,EAAE,MAAM,GAAG,MAAM,CAGnF;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,qBAAqB,EAAE,MAAM,GAC5B,cAAc,GAAG,IAAI,CAOvB;AAQD,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;AACxF,OAAO,EAAE,QAAQ,EAAE,CAAC;AAEpB,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,CAAC;AAIpB,YAAY,EACV,eAAe,EACf,WAAW,EACX,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAG5D,OAAO,EACL,iBAAiB,EAEjB,yBAAyB,EACzB,aAAa,EACb,iBAAiB,EACjB,qBAAqB,EAErB,yBAAyB,EACzB,aAAa,EACb,iBAAiB,EACjB,qBAAqB,EAErB,wBAAwB,EACxB,sBAAsB,EACtB,uBAAuB,EACvB,WAAW,EACX,2BAA2B,EAC3B,2BAA2B,EAC3B,wBAAwB,EACxB,cAAc,EACd,wBAAwB,EACxB,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,EACzB,6BAA6B,EAC7B,+BAA+B,EAC/B,2BAA2B,EAC3B,gCAAgC,GACjC,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EACV,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EACb,uBAAuB,EACvB,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,EACrB,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,cAAc,CAAC;AAEtB,YAAY,EACV,cAAc,EACd,mBAAmB,EACnB,aAAa,GACd,MAAM,cAAc,CAAC"}