feat: implement Trust Score Service with scoring algorithm and API enpoints (#810)

* feat: implement Trust Score Service with scoring algorithm and API endpoints

* format

* chore: regenerate pnpm-lock.yaml with all workspace packages

* fix: correct case for platforms/dreamsync folder and update lock file

* fix: update lockfile after correcting ecurrency folder case

* fix: update lockfile with restored ereputation and evoting client dependencies

* fix: remove auto-generated next-env.d.ts and add to gitignore

* fix: add non-negative validation for accountAgeDays and thirdDegreeConnections in GET endpoint

* fix: prevent server from starting on module import

* Regenerate pnpm-lock.yaml

Author: Bekiboo

platforms/blabsy/.gitignore

@@ -0,0 +1,2 @@
+# Next.js auto-generated files
+next-env.d.ts

pnpm-lock.yaml

@@ -0,0 +1,100 @@
+# Trust Score Service
+
+Algorithmic Trust Service that produces a deterministic numeric score from **0 to 10** for any user.
+
+## Formula
+
+| Component                      | Points |
+| ------------------------------ | ------ |
+| Unverified baseline            | 0      |
+| Account age > 180 days         | 1      |
+| Key location = TPM             | 1      |
+| Key location = SW              | 0      |
+| 3rd-degree connections < 10    | 0      |
+| 3rd-degree connections 10–24   | 0.5    |
+| 3rd-degree connections 25–99   | 1      |
+| 3rd-degree connections 100–249 | 2      |
+| 3rd-degree connections 250–499 | 3      |
+| 3rd-degree connections 500+    | 4      |
+| KYC / ID verified              | 4      |
+
+**Max score = 10** (1 + 1 + 4 + 4)
+
+## Running
+
+```bash
+# Install dependencies (from monorepo root)
+pnpm install
+
+# Dev mode with auto-reload
+pnpm --filter trust-score dev
+
+# Production
+pnpm --filter trust-score start
+```
+
+Default port: **3005** (override with `PORT` env var).
+
+## API
+
+### `GET /trust-score/:eName` (primary endpoint)
+
+Fetch the trust score for a user by their eName (W3ID). The service fetches all required data automatically.
+
+```bash
+GET /trust-score/julien.w3id
+```
+
+Response:
+
+```json
+{
+    "eName": "julien.w3id",
+    "score": 8,
+    "breakdown": {
+        "verification": 4,
+        "accountAge": 1,
+        "keyLocation": 1,
+        "socialConnections": 2
+    }
+}
+```
+
+> **Note:** Data fetching is currently mocked. Each function in `src/userDataService.js` has TODO comments showing the real API calls to wire in once binding documents are written to the eVault.
+
+### `POST /trust-score` (manual input)
+
+```json
+{
+    "isVerified": true,
+    "accountAgeDays": 200,
+    "keyLocation": "TPM",
+    "thirdDegreeConnections": 150
+}
+```
+
+### `GET /trust-score?isVerified=true&accountAgeDays=200&keyLocation=TPM&thirdDegreeConnections=150`
+
+Both return:
+
+```json
+{
+    "score": 8,
+    "breakdown": {
+        "verification": 4,
+        "accountAge": 1,
+        "keyLocation": 1,
+        "socialConnections": 2
+    }
+}
+```
+
+### `GET /health`
+
+Returns `{ "status": "ok" }`.
+
+## Testing
+
+```bash
+pnpm --filter trust-score test
+```

services/trust-score/README.md

@@ -0,0 +1,23 @@
+{
+    "name": "trust-score",
+    "version": "1.0.0",
+    "description": "Algorithmic Trust Service - deterministic numeric score from 0 to 10",
+    "main": "src/index.js",
+    "scripts": {
+        "start": "node src/index.js",
+        "dev": "nodemon src/index.js",
+        "test": "vitest run",
+        "test:watch": "vitest"
+    },
+    "keywords": [],
+    "author": "",
+    "license": "ISC",
+    "dependencies": {
+        "cors": "^2.8.5",
+        "express": "^4.21.2"
+    },
+    "devDependencies": {
+        "nodemon": "^3.0.2",
+        "vitest": "^2.1.0"
+    }
+}