@iicp/client 0.7.85 → 0.7.87

package/README.md

@@ -39,7 +39,7 @@ What good looks like:
 ```bash
 iicp-node --help       # shows query, serve, proxy, mcp-gateway, credits, ...
 which iicp-node        # points to your Node/npm environment
-iicp-node --version    # prints iicp-node 0.7.85 or newer
+iicp-node --version    # prints iicp-node 0.7.87 or newer
 ```
 
 The query command contacts the public directory, discovers a matching live node,
@@ -461,7 +461,10 @@ const node = new IicpNode({
 });
 ```
 
-> **Security note**: relay bind authentication is pending ([#510](https://github.com/RobLe3/iicp.network/issues/510)) — only run a relay accept port on networks you trust until the signed-bind mechanism ships.
+Relay workers request short-lived directory-signed bind tickets when they have a saved node
+token. Relay operators can enforce them with `IICP_RELAY_REQUIRE_BIND_TICKET=1` and the
+directory's Ed25519 verification key in `IICP_RELAY_BIND_TICKET_PUBLIC_KEY`. Keep strict mode
+enabled on public relays; unsigned compatibility mode is intended only for staged migration.
 
 ### Opt-out / override
 
@@ -477,6 +480,22 @@ IICP_AUTO_UPDATE_INTERVAL_S=3600         # update cadence in seconds; minimum 30
 IICP_RELAY_WORKER_ENDPOINT=host:9485    # specific relay instead of auto-elect
 ```
 
+### Publish a signed node policy
+
+Operators can describe public handling rules in a local JSON file and have the client sign it
+with their existing operator identity before registration:
+
+```bash
+iicp-node serve --node my-node --policy-manifest ~/.iicp/node-policy.json
+# or: IICP_POLICY_MANIFEST_FILE=~/.iicp/node-policy.json
+```
+
+The source file stays local. The registration contains the public policy document, its public
+operator key, timestamps, and detached Ed25519 signature—never the operator secret. The same
+signed document is reused during recovery re-registration, so policy does not disappear when
+a tunnel rotates. A signed declaration is tamper-evident operator evidence, not a legal or
+privacy certification.
+
 ---
 
 ## Operator identity
@@ -501,6 +520,16 @@ and the identity, with its founder ordinal, is gone.
 
 Full guide: **[iicp.network/docs/operator-identity](https://iicp.network/docs/operator-identity)**
 
+### Operator data rights
+
+You can request a portable, redacted record of the operator metadata held by a compatible directory without uploading your private identity key:
+
+```bash
+iicp-node operator dsr export --output ~/iicp-operator-export.json
+```
+
+The client obtains a short-lived challenge and signs it locally. The receipt excludes the private key, node tokens, prompt content, and contact details; it is saved owner-only on Unix. `restrict` and `anonymize` are explicit, confirmed requests and do not erase retention records that a directory must keep for security, fraud prevention, or legal obligations. See the [operator rights guide](https://iicp.network/operator/rights).
+
 ---
 
 ## SDK conformance

package/dist/cli.d.ts

@@ -17,6 +17,7 @@ export interface ProviderAutoUpdateOptions {
 export declare function startProviderAutoUpdate(options?: ProviderAutoUpdateOptions): () => void;
 export interface ServeOpts {
     backendUrl: string;
+    policyManifest?: string;
     backendType: string;
     /** #5 — Bearer key for an auth-requiring OpenAI-compat backend (LM Studio, hosted). Empty = none. */
     backendApiKey: string;

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAiDA,OAAO,EAeL,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AAIvB,KAAK,aAAa,GAAG,cAAc,cAAc,CAAC,CAAC;AAEnD,MAAM,WAAW,yBAAyB;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACnC;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,GAAE,yBAA8B,GAAG,MAAM,IAAI,CA+C3F;AAED,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,qGAAqG;IACrG,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,OAAO,CAAC;IAC1B,KAAK,EAAE,OAAO,CAAC;IACf,aAAa,EAAE,OAAO,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,iGAAiG;IACjG,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAoBD,eAAO,MAAM,qBAAqB,KAAK,CAAC;AACxC,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,UAAU,CAAC;AACtE,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,CAAC;AAE/D,wBAAgB,uBAAuB,IAAI,gBAAgB,CAM1D;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,OAAO,GAAG,kBAAkB,CAGpG;AAED,wBAAgB,0BAA0B,CAAC,YAAY,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,CAKrF;AAsaD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,OAAO,EACxB,aAAa,EAAE,OAAO,GACrB,KAAK,CAAC,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC,CAGtC;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAWlE;AAED,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,EAEhB,OAAO,CAAC,EAAE,GAAG,GACZ,MAAM,GAAG,IAAI,CAUf;AAiFD,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,GAAG,SAAS,CAsB9E;AA+2BD;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA+D5D;AA0pBD,wBAAsB,IAAI,CAAC,IAAI,GAAE,MAAM,EAA0B,GAAG,OAAO,CAAC,MAAM,CAAC,CAmBlF"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAiDA,OAAO,EAeL,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AAIvB,KAAK,aAAa,GAAG,cAAc,cAAc,CAAC,CAAC;AAEnD,MAAM,WAAW,yBAAyB;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACnC;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,GAAE,yBAA8B,GAAG,MAAM,IAAI,CA+C3F;AAED,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,qGAAqG;IACrG,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,OAAO,CAAC;IAC1B,KAAK,EAAE,OAAO,CAAC;IACf,aAAa,EAAE,OAAO,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,iGAAiG;IACjG,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAoBD,eAAO,MAAM,qBAAqB,KAAK,CAAC;AACxC,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,UAAU,CAAC;AACtE,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,CAAC;AAE/D,wBAAgB,uBAAuB,IAAI,gBAAgB,CAM1D;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,OAAO,GAAG,kBAAkB,CAGpG;AAED,wBAAgB,0BAA0B,CAAC,YAAY,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,CAKrF;AAyaD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,OAAO,EACxB,aAAa,EAAE,OAAO,GACrB,KAAK,CAAC,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC,CAGtC;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAWlE;AAED,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,EAEhB,OAAO,CAAC,EAAE,GAAG,GACZ,MAAM,GAAG,IAAI,CAUf;AAiFD,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,GAAG,SAAS,CAsB9E;AAs3BD;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA+D5D;AAixBD,wBAAsB,IAAI,CAAC,IAAI,GAAE,MAAM,EAA0B,GAAG,OAAO,CAAC,MAAM,CAAC,CAmBlF"}

package/dist/cli.js

@@ -164,6 +164,7 @@ function printHelp() {
         `  service                    Generate/install OS supervisor units for unattended node serving\n` +
         `  update                     Check whether a newer @iicp/client release is available\n` +
         `  operator rename <name>     Change your public display_name (signed by your operator key)\n` +
+        `  operator dsr <action>      Export, restrict, or anonymize your directory records\n` +
         `  operator encrypt           Password-encrypt the operator secret at rest ($IICP_OPERATOR_PASSPHRASE)\n` +
         `  operator decrypt           Remove at-rest encryption of the operator secret\n\n` +
         `Run an IICP provider node backed by an OpenAI-compatible server.\n\n` +
@@ -174,6 +175,7 @@ function printHelp() {
         `  --backend-url URL          IICP_BACKEND_URL — Ollama / vLLM / LM Studio (default http://localhost:11434; anthropic → https://api.anthropic.com)\n` +
         `  --backend-type TYPE        IICP_BACKEND_TYPE — openai_compat | vllm | llamacpp | anthropic (default openai_compat)\n` +
         `  --backend-api-key KEY      IICP_BACKEND_API_KEY — Bearer key for an auth'd backend (LM Studio, hosted); anthropic uses it as x-api-key\n` +
+        `  --policy-manifest FILE     IICP_POLICY_MANIFEST_FILE — sign and advertise a public node-policy JSON document\n` +
         `  --public-endpoint URL      IICP_PUBLIC_ENDPOINT — externally reachable URL of this node\n` +
         `  --directory-url URL        IICP_DIRECTORY_URL (default https://iicp.network/api)\n` +
         `  --region REGION            IICP_REGION (e.g. us-east; unknown if unset)\n` +
@@ -196,8 +198,8 @@ function printHelp() {
         `  --relay-worker-endpoint H  IICP_RELAY_WORKER_ENDPOINT — <host>:<port> of a relay node (R2 last-resort)\n` +
         `  --relay-capable            IICP_RELAY_CAPABLE — advertise as relay server for CGNAT/tier-4 operators\n` +
         `  --relay-accept-port N      IICP_RELAY_ACCEPT_PORT — TCP port for relay accept server (default 9485).\n` +
-        `                             Note: relay bind authentication is pending (#510) — only run a relay\n` +
-        `                             accept port on networks you trust until the signed-bind mechanism ships.\n` +
+        `                             Public relays should set IICP_RELAY_REQUIRE_BIND_TICKET=1 and\n` +
+        `                             IICP_RELAY_BIND_TICKET_PUBLIC_KEY for directory-signed one-use binds.\n` +
         `  --log-dir DIR              IICP_LOG_DIR — directory for persistent log files (<node_id>.log + events.jsonl)\n` +
         `  --with-proxy               IICP_WITH_PROXY — also run the loopback compat proxy (127.0.0.1:9483) in-process\n\n` +
         `query optional:\n` +
@@ -240,6 +242,7 @@ function printServeHelp() {
         `  --backend-url URL          IICP_BACKEND_URL — Ollama / vLLM / LM Studio (default http://localhost:11434; anthropic → https://api.anthropic.com)\n` +
         `  --backend-type TYPE        IICP_BACKEND_TYPE — openai_compat | vllm | llamacpp | anthropic\n` +
         `  --backend-api-key KEY      IICP_BACKEND_API_KEY — Bearer key for auth'd backends\n` +
+        `  --policy-manifest FILE     IICP_POLICY_MANIFEST_FILE — sign and advertise a public node-policy JSON document\n` +
         `  --public-endpoint URL      IICP_PUBLIC_ENDPOINT — externally reachable URL of this node\n` +
         `  --directory-url URL        IICP_DIRECTORY_URL (default https://iicp.network/api)\n` +
         `  --region REGION            IICP_REGION (e.g. eu-central)\n` +
@@ -935,6 +938,7 @@ async function runServe(opts) {
     let _opDisplayName;
     let _opCreatedAt;
     let _opIntegrityHash;
+    let policyManifest;
     const _identityNotice = (0, identity_js_1.noIdentityNotice)(_op);
     if (_identityNotice !== null) {
         // #503 — anonymous registration accrues no founder/recognition standing;
@@ -946,7 +950,13 @@ async function runServe(opts) {
         _opDisplayName = _op.display_name || undefined;
         _opCreatedAt = _op.created_at;
         _opIntegrityHash = _op.operator_integrity_hash || undefined;
+        if (opts.policyManifest) {
+            const { loadAndSignPolicyManifest } = await import("./policy_manifest.js");
+            policyManifest = loadAndSignPolicyManifest(opts.policyManifest, _op);
+        }
     }
+    if (opts.policyManifest && !policyManifest)
+        throw new Error("--policy-manifest requires a key-backed operator identity");
     const node = new node_js_1.IicpNode({
         nodeId,
         endpoint: publicEndpoint,
@@ -964,6 +974,7 @@ async function runServe(opts) {
         operatorDisplayName: _opDisplayName,
         operatorCreatedAt: _opCreatedAt,
         operatorIntegrityHash: _opIntegrityHash,
+        policyManifest,
         // #494 — wire backend URL for live health_models probing in heartbeats.
         backendUrl: opts.backendUrl || undefined,
         backendApiKey: opts.backendApiKey || undefined,
@@ -1974,12 +1985,131 @@ function printOperatorHelp() {
         `Manage your operator identity.\n\n` +
         `subcommands:\n` +
         `  rename <name>              Change your public display_name (signed by your operator key)\n` +
+        `  dsr <action>               Export, restrict, or anonymize your directory records\n` +
         `  encrypt                    Password-encrypt the operator secret at rest ($IICP_OPERATOR_PASSPHRASE)\n` +
         `  decrypt                    Remove at-rest encryption of the operator secret\n\n` +
         `operator rename options:\n` +
         `  --directory-url URL        IICP directory base URL (defaults to env / iicp.network)\n` +
         `  -h, --help                 Show this help and exit\n`);
 }
+async function runOperatorDsr(argv) {
+    const { values, positionals } = safeParseArgs({
+        args: argv,
+        options: {
+            "directory-url": { type: "string" },
+            "tracking-id": { type: "string" },
+            output: { type: "string" },
+            yes: { type: "boolean" },
+            help: { type: "boolean", short: "h" },
+        },
+        allowPositionals: true,
+    });
+    if (values.help) {
+        process.stdout.write("usage: iicp-node operator dsr <export|restrict|anonymize> [options]\n\n" +
+            "The local operator key signs a one-use directory challenge. It never enters the browser or request body.\n\n" +
+            "  --output FILE             Required for export; creates a new mode-0600 local file\n" +
+            "  --yes                     Confirm restrict or anonymize after the retained-record notice\n" +
+            "  --tracking-id ID          Optional local reference\n" +
+            "  --directory-url URL       IICP directory base URL\n");
+        return 0;
+    }
+    const action = positionals[0];
+    if (action !== "export" && action !== "restrict" && action !== "anonymize") {
+        process.stderr.write("ERROR: usage: iicp-node operator dsr <export|restrict|anonymize> [options]\n");
+        return 2;
+    }
+    const outputPath = values.output;
+    if (action === "export" && !outputPath) {
+        process.stderr.write("ERROR: export requires --output <new-file>; it is not printed to the terminal.\n");
+        return 2;
+    }
+    if (outputPath && fs.existsSync(outputPath)) {
+        process.stderr.write("ERROR: --output already exists; choose a new path to avoid replacing an export.\n");
+        return 2;
+    }
+    if (action !== "export") {
+        process.stderr.write("This action restricts or anonymizes directory records. Minimal signed ledger, security and accounting records may be retained and are explained in the receipt.\n");
+        if (!values.yes) {
+            process.stderr.write("Re-run with --yes to confirm.\n");
+            return 2;
+        }
+    }
+    const op = (0, identity_js_1.loadOperator)();
+    if (!op) {
+        process.stderr.write("ERROR: no operator identity — run `iicp-node init` first.\n");
+        return 1;
+    }
+    if (!(0, identity_js_1.operatorIsKeyBacked)(op)) {
+        process.stderr.write("ERROR: this legacy operator identity cannot sign a rights request; regenerate a key-backed identity.\n");
+        return 1;
+    }
+    const directoryUrl = values["directory-url"] ?? process.env["IICP_DIRECTORY_URL"] ?? "https://iicp.network/api";
+    const base = `${directoryUrl.replace(/\/+$/, "")}/v1/operator`;
+    let response;
+    try {
+        const challenge = await fetch(`${base}/challenge`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ operator_pub: op.operator_id }),
+            signal: AbortSignal.timeout(15000),
+        });
+        const challengeBody = (await challenge.json());
+        if (!challenge.ok || typeof challengeBody.nonce !== "string") {
+            throw new Error(challengeBody.error?.message ?? "directory challenge was incomplete");
+        }
+        const payload = {
+            operator_pub: op.operator_id,
+            nonce: challengeBody.nonce,
+            ts: Math.floor(Date.now() / 1000),
+            tracking_id: values["tracking-id"] ?? `dsr-${(0, node_crypto_1.randomUUID)()}`,
+        };
+        if (action !== "export")
+            payload.confirm = true;
+        payload.sig = (0, delegation_js_1.signOperatorSelfService)((0, identity_js_1.operatorSigningKey)(op), `dsr_${action}`, payload);
+        response = await fetch(`${base}/dsr/${action}`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify(payload),
+            signal: AbortSignal.timeout(15000),
+        });
+    }
+    catch (err) {
+        process.stderr.write(`ERROR: rights request failed: ${err instanceof Error ? err.message : String(err)}\n`);
+        return 1;
+    }
+    let body;
+    try {
+        body = (await response.json());
+    }
+    catch {
+        body = {};
+    }
+    if (!response.ok) {
+        const err = body.error;
+        process.stderr.write(`ERROR: directory rejected rights request: ${err?.message ?? response.status}\n`);
+        return 1;
+    }
+    if (action === "export" && outputPath) {
+        try {
+            fs.writeFileSync(outputPath, `${JSON.stringify(body, null, 2)}\n`, { encoding: "utf8", flag: "wx", mode: 0o600 });
+            fs.chmodSync(outputPath, 0o600);
+        }
+        catch (err) {
+            process.stderr.write(`ERROR: unable to save export safely: ${err instanceof Error ? err.message : String(err)}\n`);
+            return 1;
+        }
+        process.stdout.write(`Saved redacted directory export to ${outputPath} (mode 0600).\n`);
+    }
+    else {
+        process.stdout.write(`Directory ${action} request completed.\n`);
+    }
+    if (typeof body.tracking_id === "string")
+        process.stdout.write(`Receipt reference: ${body.tracking_id}\n`);
+    const retention = body.retention_notice ?? body.retention_reason;
+    if (typeof retention === "string")
+        process.stdout.write(`Retained records: ${retention}\n`);
+    return 0;
+}
 function printOperatorEncryptHelp() {
     process.stdout.write(`usage: iicp-node operator encrypt\n\n` +
         `Password-encrypt the operator secret at rest. The command prompts for a passphrase\n` +
@@ -2020,6 +2150,8 @@ async function runOperator(argv) {
             throw new CliError(`unknown operator decrypt option '${rest[0]}'`);
         return runOperatorDecrypt();
     }
+    if (sub === "dsr")
+        return runOperatorDsr(argv.slice(1));
     if (sub !== "rename") {
         process.stderr.write(`unknown operator subcommand: ${sub}\n`);
         printOperatorHelp();
@@ -2500,6 +2632,7 @@ async function dispatch(argv) {
         options: {
             node: { type: "string" },
             "backend-url": { type: "string" },
+            "policy-manifest": { type: "string" },
             "backend-type": { type: "string" },
             "backend-api-key": { type: "string" },
             model: { type: "string" },
@@ -2536,6 +2669,7 @@ async function dispatch(argv) {
     const opts = {
         node: values.node ?? envOr("IICP_NODE_NAME") ?? "",
         backendUrl: values["backend-url"] ?? envOr("IICP_BACKEND_URL") ?? "",
+        policyManifest: values["policy-manifest"] ?? envOr("IICP_POLICY_MANIFEST_FILE") ?? "",
         backendType: values["backend-type"] ??
             envOr("IICP_BACKEND_TYPE", "openai_compat"),
         backendApiKey: values["backend-api-key"] ?? envOr("IICP_BACKEND_API_KEY") ?? "",