aimeat 1.2.0

package/dist/src/services/totp.js

@@ -0,0 +1,96 @@
+import { TOTP, Secret } from 'otpauth';
+import { createRequire } from 'node:module';
+import { createCipheriv, createDecipheriv, randomBytes, createHash, timingSafeEqual } from 'node:crypto';
+// CJS-ESM interop for qrcode
+const require = createRequire(import.meta.url);
+const QRCode = require('qrcode');
+export async function setupTotp(username, config) {
+    const secret = new Secret({ size: 20 });
+    const totp = new TOTP({
+        issuer: config.issuer,
+        label: username,
+        algorithm: config.algorithm,
+        digits: config.digits,
+        period: config.period,
+        secret,
+    });
+    const uri = totp.toString();
+    const qrDataUrl = await QRCode.toDataURL(uri);
+    // Backup codes: 10 × 8-char random hex
+    const backupCodes = [];
+    const hashedBackupCodes = [];
+    for (let i = 0; i < config.backupCodeCount; i++) {
+        const code = randomBytes(4).toString('hex');
+        backupCodes.push(code);
+        hashedBackupCodes.push(createHash('sha256').update(code).digest('hex'));
+    }
+    // Encrypt secret for storage
+    const encryptedSecret = config.encryptionKey
+        ? encryptSecret(secret.base32, config.encryptionKey)
+        : secret.base32;
+    return {
+        secret: secret.base32,
+        uri,
+        qrDataUrl,
+        backupCodes,
+        encryptedSecret,
+        hashedBackupCodes,
+    };
+}
+// ── Validation ──
+export function validateTotpCode(encryptedSecret, code, config) {
+    const secretBase32 = config.encryptionKey
+        ? decryptSecret(encryptedSecret, config.encryptionKey)
+        : encryptedSecret;
+    const totp = new TOTP({
+        issuer: config.issuer,
+        algorithm: config.algorithm,
+        digits: config.digits,
+        period: config.period,
+        secret: Secret.fromBase32(secretBase32),
+    });
+    const delta = totp.validate({ token: code, window: config.window });
+    return { valid: delta !== null, delta };
+}
+// ── Backup Code Validation ──
+export function validateBackupCode(code, hashedCodes) {
+    // SECURITY: Use timing-safe comparison to prevent timing attacks
+    const hashedBuf = createHash('sha256').update(code).digest();
+    for (let i = 0; i < hashedCodes.length; i++) {
+        const storedBuf = Buffer.from(hashedCodes[i], 'hex');
+        if (hashedBuf.length === storedBuf.length && timingSafeEqual(hashedBuf, storedBuf)) {
+            return { valid: true, index: i };
+        }
+    }
+    return { valid: false, index: -1 };
+}
+// ── AES-256-GCM encryption/decryption ──
+function encryptSecret(secret, key) {
+    const iv = randomBytes(12);
+    const cipher = createCipheriv('aes-256-gcm', key, iv);
+    const encrypted = Buffer.concat([cipher.update(secret, 'utf8'), cipher.final()]);
+    const authTag = cipher.getAuthTag();
+    // Format: iv:authTag:ciphertext (all hex)
+    return `${iv.toString('hex')}:${authTag.toString('hex')}:${encrypted.toString('hex')}`;
+}
+function decryptSecret(data, key) {
+    const [ivHex, authTagHex, ciphertextHex] = data.split(':');
+    const iv = Buffer.from(ivHex, 'hex');
+    const authTag = Buffer.from(authTagHex, 'hex');
+    const ciphertext = Buffer.from(ciphertextHex, 'hex');
+    const decipher = createDecipheriv('aes-256-gcm', key, iv);
+    decipher.setAuthTag(authTag);
+    return decipher.update(ciphertext) + decipher.final('utf8');
+}
+// ── Generate new backup codes ──
+export function generateBackupCodes(count) {
+    const plain = [];
+    const hashed = [];
+    for (let i = 0; i < count; i++) {
+        const code = randomBytes(4).toString('hex');
+        plain.push(code);
+        hashed.push(createHash('sha256').update(code).digest('hex'));
+    }
+    return { plain, hashed };
+}
+//# sourceMappingURL=totp.js.map

package/dist/src/services/totp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"totp.js","sourceRoot":"","sources":["../../../src/services/totp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEzG,6BAA6B;AAC7B,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE/C,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAqD,CAAC;AA0BrF,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,QAAgB,EAChB,MAAkB;IAElB,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,QAAQ;QACf,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAE9C,uCAAuC;IACvC,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,iBAAiB,GAAa,EAAE,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5C,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,6BAA6B;IAC7B,MAAM,eAAe,GAAG,MAAM,CAAC,aAAa;QAC1C,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC;QACpD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;IAElB,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG;QACH,SAAS;QACT,WAAW;QACX,eAAe;QACf,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED,mBAAmB;AAEnB,MAAM,UAAU,gBAAgB,CAC9B,eAAuB,EACvB,IAAY,EACZ,MAAkB;IAElB,MAAM,YAAY,GAAG,MAAM,CAAC,aAAa;QACvC,CAAC,CAAC,aAAa,CAAC,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC;QACtD,CAAC,CAAC,eAAe,CAAC;IAEpB,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC;KACxC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACpE,OAAO,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI,EAAE,KAAK,EAAE,CAAC;AAC1C,CAAC;AAED,+BAA+B;AAE/B,MAAM,UAAU,kBAAkB,CAChC,IAAY,EACZ,WAAqB;IAErB,iEAAiE;IACjE,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;IAE7D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACrD,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,IAAI,eAAe,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;YACnF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACnC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;AACrC,CAAC;AAED,0CAA0C;AAE1C,SAAS,aAAa,CAAC,MAAc,EAAE,GAAW;IAChD,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACjF,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACpC,0CAA0C;IAC1C,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACzF,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,GAAW;IAC9C,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,aAAa,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3D,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC1D,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC7B,OAAO,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC9D,CAAC;AAED,kCAAkC;AAElC,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC3B,CAAC"}

package/dist/src/services/trust-broadcast.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Trust Advisory Broadcast Service — outbound broadcast of trust advisories to federation peers.
+ * Per RFC v1.5 §13.5.
+ */
+import type { AimeatConfig } from '../config.js';
+import type { Storage } from '../storage/interface.js';
+import type { PeerInfo } from '../services/federation.js';
+export interface TrustAdvisory {
+    target_node: string;
+    advisory_type: 'warning' | 'suspend' | 'ban';
+    reason: string;
+    evidence_hash?: string;
+    issued_by: string;
+    timestamp: string;
+    signature?: string;
+}
+export interface BroadcastResult {
+    advisory: TrustAdvisory;
+    deliveries: Array<{
+        peer_node_id: string;
+        success: boolean;
+        error?: string;
+    }>;
+    total_peers: number;
+    successful: number;
+    failed: number;
+}
+/**
+ * Broadcast a trust advisory to all active federation peers.
+ * Signs the advisory with the node's Ed25519 key and POSTs to each peer.
+ */
+export declare function broadcastTrustAdvisory(advisory: Omit<TrustAdvisory, 'issued_by' | 'timestamp' | 'signature'>, config: AimeatConfig, storage: Storage, peers: Map<string, PeerInfo>): Promise<BroadcastResult>;
+/**
+ * Enqueue a trust advisory to the replication queue for reliable delivery.
+ */
+export declare function enqueueTrustAdvisory(advisory: Omit<TrustAdvisory, 'issued_by' | 'timestamp' | 'signature'>, config: AimeatConfig, storage: Storage, peers: Map<string, PeerInfo>): Promise<string>;
+//# sourceMappingURL=trust-broadcast.d.ts.map

package/dist/src/services/trust-broadcast.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-broadcast.d.ts","sourceRoot":"","sources":["../../../src/services/trust-broadcast.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAK1D,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,SAAS,GAAG,SAAS,GAAG,KAAK,CAAC;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,aAAa,CAAC;IACxB,UAAU,EAAE,KAAK,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,WAAW,GAAG,WAAW,GAAG,WAAW,CAAC,EACtE,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,GAC3B,OAAO,CAAC,eAAe,CAAC,CAgF1B;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,WAAW,GAAG,WAAW,GAAG,WAAW,CAAC,EACtE,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,GAC3B,OAAO,CAAC,MAAM,CAAC,CAiBjB"}

package/dist/src/services/trust-broadcast.js

@@ -0,0 +1,107 @@
+/**
+ * Trust Advisory Broadcast Service — outbound broadcast of trust advisories to federation peers.
+ * Per RFC v1.5 §13.5.
+ */
+import { sign } from '../auth/keypair.js';
+import { validateOutboundUrl } from '../utils/url-validator.js';
+import { logger } from '../utils/logger.js';
+/**
+ * Broadcast a trust advisory to all active federation peers.
+ * Signs the advisory with the node's Ed25519 key and POSTs to each peer.
+ */
+export async function broadcastTrustAdvisory(advisory, config, storage, peers) {
+    const now = new Date().toISOString();
+    const fullAdvisory = {
+        ...advisory,
+        issued_by: config.nodeId,
+        timestamp: now,
+    };
+    // Sign the advisory with node key
+    const nodeKey = await storage.getNodeKey();
+    if (nodeKey?.privateKey) {
+        const payloadToSign = JSON.stringify({
+            target_node: fullAdvisory.target_node,
+            advisory_type: fullAdvisory.advisory_type,
+            reason: fullAdvisory.reason,
+            evidence_hash: fullAdvisory.evidence_hash,
+            issued_by: fullAdvisory.issued_by,
+            timestamp: fullAdvisory.timestamp,
+        });
+        fullAdvisory.signature = await sign(nodeKey.privateKey, payloadToSign);
+    }
+    const activePeers = [...peers.values()].filter(p => p.status === 'active');
+    const deliveries = [];
+    let successful = 0;
+    let failed = 0;
+    for (const peer of activePeers) {
+        try {
+            // SSRF validation
+            const urlCheck = await validateOutboundUrl(peer.url);
+            if (!urlCheck.valid) {
+                deliveries.push({ peer_node_id: peer.nodeId, success: false, error: `SSRF blocked: ${urlCheck.reason}` });
+                failed++;
+                continue;
+            }
+            const resp = await fetch(`${peer.url}/v1/federation/trust-advisory`, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify(fullAdvisory),
+                signal: AbortSignal.timeout(config.federationTimeoutMs),
+            });
+            if (resp.ok) {
+                deliveries.push({ peer_node_id: peer.nodeId, success: true });
+                successful++;
+                logger.info(`Trust advisory delivered to peer ${peer.nodeId}`, {
+                    advisory_type: fullAdvisory.advisory_type,
+                    target_node: fullAdvisory.target_node,
+                });
+            }
+            else {
+                const body = await resp.text().catch(() => '');
+                deliveries.push({ peer_node_id: peer.nodeId, success: false, error: `HTTP ${resp.status}: ${body}` });
+                failed++;
+                logger.warn(`Trust advisory delivery failed to peer ${peer.nodeId}: HTTP ${resp.status}`);
+            }
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : 'unknown error';
+            deliveries.push({ peer_node_id: peer.nodeId, success: false, error: msg });
+            failed++;
+            logger.warn(`Trust advisory delivery error to peer ${peer.nodeId}: ${msg}`);
+        }
+    }
+    logger.info('Trust advisory broadcast completed', {
+        target_node: fullAdvisory.target_node,
+        advisory_type: fullAdvisory.advisory_type,
+        total_peers: activePeers.length,
+        successful,
+        failed,
+    });
+    return {
+        advisory: fullAdvisory,
+        deliveries,
+        total_peers: activePeers.length,
+        successful,
+        failed,
+    };
+}
+/**
+ * Enqueue a trust advisory to the replication queue for reliable delivery.
+ */
+export async function enqueueTrustAdvisory(advisory, config, storage, peers) {
+    const activePeerIds = [...peers.values()]
+        .filter(p => p.status === 'active')
+        .map(p => p.nodeId);
+    const id = await storage.enqueueReplication({
+        type: 'trust_advisory',
+        targetPeers: activePeerIds,
+        payload: {
+            ...advisory,
+            issued_by: config.nodeId,
+            timestamp: new Date().toISOString(),
+        },
+        createdAt: new Date().toISOString(),
+    });
+    return id;
+}
+//# sourceMappingURL=trust-broadcast.js.map

package/dist/src/services/trust-broadcast.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-broadcast.js","sourceRoot":"","sources":["../../../src/services/trust-broadcast.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAwB5C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAAsE,EACtE,MAAoB,EACpB,OAAgB,EAChB,KAA4B;IAE5B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,YAAY,GAAkB;QAClC,GAAG,QAAQ;QACX,SAAS,EAAE,MAAM,CAAC,MAAM;QACxB,SAAS,EAAE,GAAG;KACf,CAAC;IAEF,kCAAkC;IAClC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;IAC3C,IAAI,OAAO,EAAE,UAAU,EAAE,CAAC;QACxB,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC;YACnC,WAAW,EAAE,YAAY,CAAC,WAAW;YACrC,aAAa,EAAE,YAAY,CAAC,aAAa;YACzC,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,aAAa,EAAE,YAAY,CAAC,aAAa;YACzC,SAAS,EAAE,YAAY,CAAC,SAAS;YACjC,SAAS,EAAE,YAAY,CAAC,SAAS;SAClC,CAAC,CAAC;QACH,YAAY,CAAC,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;IAC3E,MAAM,UAAU,GAAkC,EAAE,CAAC;IACrD,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,kBAAkB;YAClB,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACpB,UAAU,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC1G,MAAM,EAAE,CAAC;gBACT,SAAS;YACX,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,+BAA+B,EAAE;gBACnE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;gBAClC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC;aACxD,CAAC,CAAC;YAEH,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;gBACZ,UAAU,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9D,UAAU,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,oCAAoC,IAAI,CAAC,MAAM,EAAE,EAAE;oBAC7D,aAAa,EAAE,YAAY,CAAC,aAAa;oBACzC,WAAW,EAAE,YAAY,CAAC,WAAW;iBACtC,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC/C,UAAU,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC;gBACtG,MAAM,EAAE,CAAC;gBACT,MAAM,CAAC,IAAI,CAAC,0CAA0C,IAAI,CAAC,MAAM,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACjE,UAAU,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAC3E,MAAM,EAAE,CAAC;YACT,MAAM,CAAC,IAAI,CAAC,yCAAyC,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;QAChD,WAAW,EAAE,YAAY,CAAC,WAAW;QACrC,aAAa,EAAE,YAAY,CAAC,aAAa;QACzC,WAAW,EAAE,WAAW,CAAC,MAAM;QAC/B,UAAU;QACV,MAAM;KACP,CAAC,CAAC;IAEH,OAAO;QACL,QAAQ,EAAE,YAAY;QACtB,UAAU;QACV,WAAW,EAAE,WAAW,CAAC,MAAM;QAC/B,UAAU;QACV,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAAsE,EACtE,MAAoB,EACpB,OAAgB,EAChB,KAA4B;IAE5B,MAAM,aAAa,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;SACtC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;SAClC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAEtB,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC;QAC1C,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,aAAa;QAC1B,OAAO,EAAE;YACP,GAAG,QAAQ;YACX,SAAS,EAAE,MAAM,CAAC,MAAM;YACxB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC;QACD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;IAEH,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/src/services/trust.d.ts

@@ -0,0 +1,16 @@
+import type { Storage } from '../storage/interface.js';
+export interface TrustData {
+    score: number;
+    totalDeliveries: number;
+    successfulDeliveries: number;
+    failedDeliveries: number;
+    expiredDeliveries: number;
+    successRate: number;
+    positiveRatings: number;
+    negativeRatings: number;
+    avgDeliveryTimeSeconds: number;
+    ageDays: number;
+    disputesLost: number;
+}
+export declare function calculateTrustScore(gaii: string, storage: Storage): Promise<TrustData>;
+//# sourceMappingURL=trust.d.ts.map

package/dist/src/services/trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.d.ts","sourceRoot":"","sources":["../../../src/services/trust.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAcvD,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAiG5F"}

package/dist/src/services/trust.js

@@ -0,0 +1,109 @@
+/** Trust score component weights (must sum to 1.0) */
+const TRUST_WEIGHTS = {
+    successRate: 0.30,
+    positiveRatings: 0.25,
+    accountAge: 0.15,
+    volume: 0.15,
+    disputes: 0.15,
+};
+/** Points deducted per lost dispute (from a base of 100) */
+const DISPUTE_PENALTY_PER_LOSS = 33;
+export async function calculateTrustScore(gaii, storage) {
+    const agent = await storage.getAgent(gaii);
+    if (!agent) {
+        return defaultTrust();
+    }
+    const providerWork = await storage.listWorkByProvider(gaii);
+    let delivered = 0, failed = 0, expired = 0;
+    let positiveRatings = 0, negativeRatings = 0;
+    let totalDeliveryTime = 0;
+    // Track unique counterparties for diversity check (anti-manipulation)
+    const uniqueCounterparties = new Set();
+    // Track disputes lost from actual dispute data
+    const disputes = await storage.listDisputesByProvider(gaii);
+    const disputesLost = disputes.filter(d => d.status === 'resolved' && d.ruling?.ruling === 'requester_wins').length;
+    for (const w of providerWork) {
+        // SECURITY: Skip self-work (defense in depth — should be blocked at creation)
+        if (w.requesterGaii === gaii)
+            continue;
+        if (w.status === 'delivered' || w.status === 'rated') {
+            delivered++;
+            uniqueCounterparties.add(w.requesterGaii);
+            if (w.rating) {
+                if (w.rating.score >= 4)
+                    positiveRatings++;
+                else
+                    negativeRatings++;
+            }
+            // Estimate delivery time from timestamps
+            const created = new Date(w.createdAt).getTime();
+            const updated = new Date(w.updatedAt).getTime();
+            totalDeliveryTime += (updated - created) / 1000;
+        }
+        else if (w.status === 'failed' || w.status === 'rejected') {
+            failed++;
+        }
+        else if (w.status === 'expired') {
+            expired++;
+        }
+    }
+    const totalAttempts = delivered + failed + expired;
+    const successRate = totalAttempts > 0 ? (delivered / totalAttempts) * 100 : 0;
+    const totalRatings = positiveRatings + negativeRatings;
+    const positiveRatingRatio = totalRatings > 0 ? (positiveRatings / totalRatings) * 100 : 50;
+    const ageDays = Math.floor((Date.now() - new Date(agent.createdAt).getTime()) / 86_400_000);
+    const ageFactor = Math.min(100, Math.log2(ageDays + 1) * 15);
+    const volumeFactor = Math.min(100, Math.log2(delivered + 1) * 11);
+    const disputePenalty = Math.max(0, 100 - disputesLost * DISPUTE_PENALTY_PER_LOSS);
+    let score = Math.floor(successRate * TRUST_WEIGHTS.successRate +
+        positiveRatingRatio * TRUST_WEIGHTS.positiveRatings +
+        ageFactor * TRUST_WEIGHTS.accountAge +
+        volumeFactor * TRUST_WEIGHTS.volume +
+        disputePenalty * TRUST_WEIGHTS.disputes);
+    // SECURITY: Require minimum 3 unique counterparties for meaningful trust score
+    // Prevents trust inflation through repeated work with a single colluding party
+    if (uniqueCounterparties.size < 3) {
+        score = Math.min(score, 40);
+    }
+    // Inactivity decay: -1 per 30 days with no transactions
+    if (agent.lastSeen) {
+        const daysSinceActive = Math.floor((Date.now() - new Date(agent.lastSeen).getTime()) / 86_400_000);
+        const decayPeriods = Math.floor(daysSinceActive / 30);
+        score = Math.max(0, score - decayPeriods);
+    }
+    // New agent cap: max 65 for first 7 days
+    if (ageDays < 7 && score > 65) {
+        score = 65;
+    }
+    score = Math.max(0, Math.min(100, score));
+    const avgDeliveryTimeSeconds = delivered > 0 ? Math.round(totalDeliveryTime / delivered) : 0;
+    return {
+        score,
+        totalDeliveries: delivered,
+        successfulDeliveries: delivered,
+        failedDeliveries: failed,
+        expiredDeliveries: expired,
+        successRate: totalAttempts > 0 ? delivered / totalAttempts : 0,
+        positiveRatings,
+        negativeRatings,
+        avgDeliveryTimeSeconds,
+        ageDays,
+        disputesLost,
+    };
+}
+function defaultTrust() {
+    return {
+        score: 50,
+        totalDeliveries: 0,
+        successfulDeliveries: 0,
+        failedDeliveries: 0,
+        expiredDeliveries: 0,
+        successRate: 0,
+        positiveRatings: 0,
+        negativeRatings: 0,
+        avgDeliveryTimeSeconds: 0,
+        ageDays: 0,
+        disputesLost: 0,
+    };
+}
+//# sourceMappingURL=trust.js.map

package/dist/src/services/trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.js","sourceRoot":"","sources":["../../../src/services/trust.ts"],"names":[],"mappings":"AAEA,sDAAsD;AACtD,MAAM,aAAa,GAAG;IACpB,WAAW,EAAE,IAAI;IACjB,eAAe,EAAE,IAAI;IACrB,UAAU,EAAE,IAAI;IAChB,MAAM,EAAE,IAAI;IACZ,QAAQ,EAAE,IAAI;CACN,CAAC;AAEX,4DAA4D;AAC5D,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAgBpC,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,OAAgB;IACtE,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,YAAY,EAAE,CAAC;IACxB,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAE5D,IAAI,SAAS,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC;IAC3C,IAAI,eAAe,GAAG,CAAC,EAAE,eAAe,GAAG,CAAC,CAAC;IAC7C,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAE1B,sEAAsE;IACtE,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/C,+CAA+C;IAC/C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACvC,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,KAAK,gBAAgB,CACjE,CAAC,MAAM,CAAC;IAET,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC7B,8EAA8E;QAC9E,IAAI,CAAC,CAAC,aAAa,KAAK,IAAI;YAAE,SAAS;QAEvC,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YACrD,SAAS,EAAE,CAAC;YACZ,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YAC1C,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;gBACb,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;oBAAE,eAAe,EAAE,CAAC;;oBACtC,eAAe,EAAE,CAAC;YACzB,CAAC;YACD,yCAAyC;YACzC,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;YAChD,iBAAiB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC;QAClD,CAAC;aAAM,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC5D,MAAM,EAAE,CAAC;QACX,CAAC;aAAM,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC;IACnD,MAAM,WAAW,GAAG,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAE9E,MAAM,YAAY,GAAG,eAAe,GAAG,eAAe,CAAC;IACvD,MAAM,mBAAmB,GAAG,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,GAAG,YAAY,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAE3F,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC;IAC5F,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7D,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAClE,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,YAAY,GAAG,wBAAwB,CAAC,CAAC;IAElF,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CACpB,WAAW,GAAG,aAAa,CAAC,WAAW;QACvC,mBAAmB,GAAG,aAAa,CAAC,eAAe;QACnD,SAAS,GAAG,aAAa,CAAC,UAAU;QACpC,YAAY,GAAG,aAAa,CAAC,MAAM;QACnC,cAAc,GAAG,aAAa,CAAC,QAAQ,CACxC,CAAC;IAEF,+EAA+E;IAC/E,+EAA+E;IAC/E,IAAI,oBAAoB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QAClC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED,wDAAwD;IACxD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnB,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC;QACnG,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,EAAE,CAAC,CAAC;QACtD,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,YAAY,CAAC,CAAC;IAC5C,CAAC;IAED,yCAAyC;IACzC,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;QAC9B,KAAK,GAAG,EAAE,CAAC;IACb,CAAC;IAED,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAE1C,MAAM,sBAAsB,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE7F,OAAO;QACL,KAAK;QACL,eAAe,EAAE,SAAS;QAC1B,oBAAoB,EAAE,SAAS;QAC/B,gBAAgB,EAAE,MAAM;QACxB,iBAAiB,EAAE,OAAO;QAC1B,WAAW,EAAE,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QAC9D,eAAe;QACf,eAAe;QACf,sBAAsB;QACtB,OAAO;QACP,YAAY;KACb,CAAC;AACJ,CAAC;AAED,SAAS,YAAY;IACnB,OAAO;QACL,KAAK,EAAE,EAAE;QACT,eAAe,EAAE,CAAC;QAClB,oBAAoB,EAAE,CAAC;QACvB,gBAAgB,EAAE,CAAC;QACnB,iBAAiB,EAAE,CAAC;QACpB,WAAW,EAAE,CAAC;QACd,eAAe,EAAE,CAAC;QAClB,eAAe,EAAE,CAAC;QAClB,sBAAsB,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;QACV,YAAY,EAAE,CAAC;KAChB,CAAC;AACJ,CAAC"}

package/dist/src/services/vc-issuer.d.ts

@@ -0,0 +1,14 @@
+import type { AimeatConfig } from '../config.js';
+import type { GHIIRecord } from '../storage/interface.js';
+export interface VerifiableCredential {
+    '@context': string[];
+    type: string[];
+    issuer: string;
+    issuanceDate: string;
+    credentialSubject: Record<string, unknown>;
+}
+export interface VcIssuerService {
+    issueIdentityCredential(ghiiRecord: GHIIRecord): VerifiableCredential;
+}
+export declare function createVcIssuerService(config: AimeatConfig): VcIssuerService;
+//# sourceMappingURL=vc-issuer.d.ts.map

package/dist/src/services/vc-issuer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vc-issuer.d.ts","sourceRoot":"","sources":["../../../src/services/vc-issuer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE1D,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,eAAe;IAC9B,uBAAuB,CAAC,UAAU,EAAE,UAAU,GAAG,oBAAoB,CAAC;CACvE;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,YAAY,GAAG,eAAe,CAuB3E"}

package/dist/src/services/vc-issuer.js

@@ -0,0 +1,24 @@
+export function createVcIssuerService(config) {
+    const issuerDid = config.vcIssuerDid || `did:web:${config.nodeId}.aimeat.example`;
+    return {
+        issueIdentityCredential(ghiiRecord) {
+            return {
+                '@context': [
+                    'https://www.w3.org/ns/credentials/v2',
+                    'https://aimeat.spechops.com/ns/credentials/v1',
+                ],
+                type: ['VerifiableCredential', 'AIMEATIdentityCredential'],
+                issuer: issuerDid,
+                issuanceDate: new Date().toISOString(),
+                credentialSubject: {
+                    id: `did:aimeat:${ghiiRecord.ghii}`,
+                    type: 'AIMEATUser',
+                    verificationLevel: ghiiRecord.verificationLevel,
+                    memberSince: ghiiRecord.createdAt.split('T')[0],
+                    displayName: ghiiRecord.displayName,
+                },
+            };
+        },
+    };
+}
+//# sourceMappingURL=vc-issuer.js.map

package/dist/src/services/vc-issuer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vc-issuer.js","sourceRoot":"","sources":["../../../src/services/vc-issuer.ts"],"names":[],"mappings":"AAeA,MAAM,UAAU,qBAAqB,CAAC,MAAoB;IACxD,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,IAAI,WAAW,MAAM,CAAC,MAAM,iBAAiB,CAAC;IAElF,OAAO;QACL,uBAAuB,CAAC,UAAsB;YAC5C,OAAO;gBACL,UAAU,EAAE;oBACV,sCAAsC;oBACtC,+CAA+C;iBAChD;gBACD,IAAI,EAAE,CAAC,sBAAsB,EAAE,0BAA0B,CAAC;gBAC1D,MAAM,EAAE,SAAS;gBACjB,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACtC,iBAAiB,EAAE;oBACjB,EAAE,EAAE,cAAc,UAAU,CAAC,IAAI,EAAE;oBACnC,IAAI,EAAE,YAAY;oBAClB,iBAAiB,EAAE,UAAU,CAAC,iBAAiB;oBAC/C,WAAW,EAAE,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBAC/C,WAAW,EAAE,UAAU,CAAC,WAAW;iBACpC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}