signalk-p2p-plugin 0.3.0 → 0.4.0

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+## 0.4.0 — 2026-11-06
+
+- Add a signed, versioned network policy for sharding, election windows, public
+  publish-rate caps, AIS caps and protocol compatibility. A signed default ships
+  with the package; newer signed policies received over the mesh override it and
+  are cached. Clients cannot override topology/rate limits locally.
+- Add the network-operator key tooling and a pinned default operator public key;
+  the standalone peer can verify and republish a signed policy file.
+- Safer defaults: public network is receive-only, AIS is receive-only/private,
+  and new installs must opt in before transmitting.
+- Add a per-data-set sharing matrix in the webapp: Public plus every active group
+  as columns, with checkboxes and no manual group IDs.
+- Add group publish-rate caps set by group admins, with per-member rates inside
+  the cap (supports 1–2 Hz small groups).
+- Move advanced/sharing/security/topology settings into a plugin-owned
+  `advanced.json` so the simplified Signal K config form cannot drop them; the
+  form now exposes only relay and received-vessel toggles.
+- Hide identity, claims and mesh details behind an Advanced disclosure in the
+  webapp, and hide empty join-request/proposal sections.
+
 ## 0.3.0 — 2026-11-06
 
 - Add a Public network card to the webapp with status, peers/elected relay and

package/README.md

@@ -3,7 +3,7 @@
 **Peer-to-peer vessel data between Signal K instances.** One global public mesh,
 joined by default, plus any number of private, encrypted groups.
 
-> **Status: v0.1.0 — first public release.** The core path
+> **Status: v0.4.0.** The core path
 > (publish → relay → inject) and the security, election, group and AIS features
 > are implemented and validated over WAN through a VPS peer. It has not yet been
 > validated on real boats or Starlink links; treat this release as a field-test
@@ -14,21 +14,23 @@ joined by default, plus any number of private, encrypted groups.
 - Share position, navigation (including magnetic course/heading, attitude, rate of
   turn, speed through water and GNSS DOP/satellites), depth, environment, tanks,
   destination, anchor, propulsion and systems, per network.
-- Join the global `all-vessels` network automatically (opt-out, with four consent
-  modes), or only share with selected groups.
+- Join the global `all-vessels` network automatically, but transmit only after
+  opting in (receive-only by default; four consent modes).
 - Create private groups with encrypted data, invite links, roles, admin-approved
   MMSIs, member removal and key rotation.
 - Carry other vessels you hear over AIS into a shared map, with four AIS modes and
   nearest-target caps; AIS observations are never re-published.
 - Signed messages, claim/attestation authorization, and one authorized writer per
   vessel context, so a peer can never overwrite another vessel's data.
+- Central, signed **network policy** for sharding, election windows, publish
+  rate caps and AIS caps. Individual clients cannot override topology tuning.
 - Relay through elected peers with no fixed relays, plus an optional standalone
   Node.js peer for a VPS bootstrap when most boats are behind CGNAT.
-- An admin webapp for claims, groups, join requests and proposals. The Groups
-  view includes a Public network card with status, peers/elected relay and
-  per-data-set public sharing toggles. It appears under **Webapps** while the
-  plugin is enabled, and is also served at
-  `/plugins/signalk-p2p-plugin/admin` (admin login required).
+- An admin webapp with a per-data-set sharing matrix: Public and each active
+  group are columns, so there is no typing of group IDs. Group admins set a
+  publish-rate cap; members choose their own rate within it.
+- The webapp appears under **Webapps** while the plugin is enabled, and is also
+  served at `/plugins/signalk-p2p-plugin/admin` (admin login required).
 
 ## Install
 
@@ -46,10 +48,12 @@ Requires Node `>=22.5` (a Signal K server on Node 22.5 or newer).
 After enabling the plugin, open **Signal K P2P** from the Webapps menu. The UI
 calls the admin-gated API, so you must be signed in as an administrator.
 
-Default sharing is conservative: position, navigation, depth and AIS are on for
-the public mesh; environment, tanks, destination, anchor, propulsion and systems
-are off publicly until you enable them. See
-[`shared-data.md`](docs/plans/shared-data.md) for the data sets and defaults.
+Default sharing is conservative: the public network is **receive-only**, so no
+vessel data is transmitted until you choose a sharing mode in the webapp. AIS is
+receive-only/private by default. Identity, position, navigation and depth are
+pre-selected when you opt in; environment, tanks, destination, anchor,
+propulsion and systems stay off until enabled. See
+[`shared-data.md`](docs/plans/shared-data.md).
 
 ## Standalone peer
 
@@ -60,8 +64,31 @@ npm install -g signalk-p2p-plugin
 signalk-p2p-peer --help
 ```
 
-See [`deploy/README.md`](deploy/README.md) for the systemd unit and an example
-configuration.
+See [`deploy/README.md`](deploy/README.md) for the systemd unit, an example
+configuration, and how to publish a signed network policy.
+
+## Admin and network policy
+
+The Signal K plugin config form intentionally exposes only two safe toggles:
+**Help relay nearby vessels** and **Show vessels received from the network**.
+Everything else lives in the plugin-owned `advanced.json` (in the plugin data
+directory), including sharing, consent, AIS, security and topology settings.
+This keeps the form simple and prevents a form save from dropping advanced
+settings.
+
+Network-wide settings are not user-editable. A **network policy** is signed by
+the network operator and distributed as:
+
+- a signed default policy shipped in the package, and
+- newer signed policies received over the mesh (live wins).
+
+The operator key public key is
+`b393c24608f23cdb389cfb0cbc8c9de619345fa110cdddcb14ab6afdb494db09`
+(fingerprint `254375e336e45f93bb5691e49fdb4e758fefed7981940d98dc9773b8b23390bf`).
+The private key is stored outside the repository at
+`~/.config/signalk-p2p/operator/operator.json` (mode 0600); distribute the public
+key and signed policy files, never the private key. Use
+`scripts/sign-policy.ts` to sign a new policy.
 
 ## Design
 

package/deploy/README.md

@@ -50,7 +50,25 @@ journalctl -u signalk-p2p-peer -f
 The peer prints its identity fingerprint and the topic it joined. The Ed25519
 identity is created in `/var/lib/signalk-p2p/identity/ed25519.pem` (mode 0600).
 
-## 4. Firewall
+## 4. Publish the network policy (optional)
+
+A peer can distribute the signed public-network policy. It verifies the
+signature with the pinned operator key and republishes it every five minutes; it
+never needs the operator private key.
+
+```bash
+cp deploy/policy.json /etc/signalk-p2p/policy.json
+# add this key to /etc/signalk-p2p/peer.json:
+#   "policyFile": "/etc/signalk-p2p/policy.json"
+systemctl restart signalk-p2p-peer
+journalctl -u signalk-p2p-peer -n 20 | grep policy
+```
+
+Sign a new policy with `scripts/sign-policy.ts` from a checkout, then copy the
+signed file and restart the peer. Clients keep the newest valid policy they have
+seen, so they continue to use it if the publisher is offline.
+
+## 5. Firewall
 
 Hyperswarm uses UDP. If you set `"port": 49737`, allow UDP 49737 inbound so other
 peers can dial it:
@@ -70,7 +88,7 @@ to join and relay a private group. The peer sends a join request from its
 synthetic selfId; an admin must approve it (a `viewer` role is enough, because a
 relay does not publish vessel data).
 
-## 5. Verify
+## 7. Verify
 
 From another machine on a different network:
 

package/deploy/policy.json

@@ -0,0 +1,30 @@
+{
+  "policy": {
+    "version": 2,
+    "topic": "signalk-p2p/all-vessels/v1",
+    "protocol": 1,
+    "issuedAt": 1794023623,
+    "sharding": {
+      "maxVesselsPerShard": 500,
+      "maxVesselsPerInstance": 1000,
+      "lookAheadKm": 50,
+      "splitSettleMinutes": 10,
+      "mergeSettleMinutes": 60,
+      "mergeBelowRatio": 0.25,
+      "boundaryHysteresisMeters": 1000
+    },
+    "election": {
+      "epochMinutes": 10,
+      "minUptimeMinutes": 10
+    },
+    "rates": {
+      "maxSnapshotHzUnderway": 0.05,
+      "maxSnapshotHzMoored": 0.01
+    },
+    "ais": {
+      "maxTargets": 100,
+      "maxRateHz": 0.02
+    }
+  },
+  "signature": "VKtZkIvKsyt3RwQWwvF1K6GP8Oh/tODyERYMAVWPMjH8UgN0TztN8LOhY/KpGpfBo3OTO0ktQf04zVPZhuUcDw=="
+}

package/dist/advanced-config.d.ts

@@ -0,0 +1,11 @@
+import type { Config } from "./config.js";
+export declare const ADVANCED_CONFIG_FILE = "advanced.json";
+/**
+ * Advanced settings live outside the Signal K plugin configuration form so a
+ * form save cannot drop them. The form owns only the simple relay/injection
+ * toggles; sharing, network consent, AIS, security and topology stay here.
+ */
+export declare function loadAdvancedConfig(dataDir: string, legacy: Partial<Config>): Partial<Config>;
+export declare function mergeSimpleConfig(advanced: Partial<Config>, simple: Partial<Config>): Partial<Config>;
+export declare function saveAdvancedConfig(dataDir: string, config: Config): void;
+//# sourceMappingURL=advanced-config.d.ts.map

package/dist/advanced-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"advanced-config.d.ts","sourceRoot":"","sources":["../src/advanced-config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,eAAO,MAAM,oBAAoB,kBAAkB,CAAC;AAEpD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,GACtB,OAAO,CAAC,MAAM,CAAC,CAgBjB;AAED,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,EACzB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,GACtB,OAAO,CAAC,MAAM,CAAC,CAYjB;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAOxE"}

package/dist/advanced-config.js

@@ -0,0 +1,40 @@
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+export const ADVANCED_CONFIG_FILE = "advanced.json";
+/**
+ * Advanced settings live outside the Signal K plugin configuration form so a
+ * form save cannot drop them. The form owns only the simple relay/injection
+ * toggles; sharing, network consent, AIS, security and topology stay here.
+ */
+export function loadAdvancedConfig(dataDir, legacy) {
+    try {
+        const parsed = JSON.parse(readFileSync(join(dataDir, ADVANCED_CONFIG_FILE), "utf8"));
+        if (parsed !== null &&
+            typeof parsed === "object" &&
+            !Array.isArray(parsed)) {
+            return parsed;
+        }
+    }
+    catch {
+        // No advanced file yet: migrate from the legacy plugin configuration.
+    }
+    return legacy;
+}
+export function mergeSimpleConfig(advanced, simple) {
+    return {
+        ...advanced,
+        election: {
+            ...(advanced.election ?? {}),
+            ...(simple.election ?? {}),
+        },
+        inject: {
+            ...(advanced.inject ?? {}),
+            ...(simple.inject ?? {}),
+        },
+    };
+}
+export function saveAdvancedConfig(dataDir, config) {
+    mkdirSync(dataDir, { recursive: true, mode: 0o700 });
+    writeFileSync(join(dataDir, ADVANCED_CONFIG_FILE), JSON.stringify(config, null, 2) + "\n", { mode: 0o600 });
+}
+//# sourceMappingURL=advanced-config.js.map

package/dist/advanced-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"advanced-config.js","sourceRoot":"","sources":["../src/advanced-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,MAAM,CAAC,MAAM,oBAAoB,GAAG,eAAe,CAAC;AAEpD;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,MAAuB;IAEvB,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAChC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,EAAE,MAAM,CAAC,CAC1D,CAAC;QACF,IACE,MAAM,KAAK,IAAI;YACf,OAAO,MAAM,KAAK,QAAQ;YAC1B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EACtB,CAAC;YACD,OAAO,MAAyB,CAAC;QACnC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;IACxE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,QAAyB,EACzB,MAAuB;IAEvB,OAAO;QACL,GAAG,QAAQ;QACX,QAAQ,EAAE;YACR,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC;YAC5B,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;SACL;QACvB,MAAM,EAAE;YACN,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;YAC1B,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;SACL;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,MAAc;IAChE,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,aAAa,CACX,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,EACnC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EACtC,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;AACJ,CAAC"}

package/dist/api.d.ts

@@ -5,6 +5,11 @@ import type { ConsentMode, DataSetId } from "./config.js";
 export interface P2PStatus {
     started: boolean;
     version: string;
+    policy?: {
+        version: number;
+        issuedAt: number;
+        operator?: string;
+    };
     identity?: {
         fingerprint: string;
         publicKey: string;
@@ -37,12 +42,20 @@ export interface SharingInfo {
         title: string;
         description: string;
         public: boolean;
+        groups: "all" | string[];
     }>;
 }
 export interface P2PControl extends ClaimControl, GroupControl {
     status(): P2PStatus;
     sharing(): SharingInfo;
-    setPublicSharing(dataSet: string, publicValue: boolean): Promise<{
+    setSharing(dataSet: string, update: {
+        public?: boolean;
+        groups?: "all" | string[];
+    }): Promise<{
+        ok: boolean;
+        error?: string;
+    }>;
+    setConsent(consent: string): Promise<{
         ok: boolean;
         error?: string;
     }>;

package/dist/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGxD,OAAO,KAAK,EAAE,YAAY,EAAe,MAAM,qBAAqB,CAAC;AACrE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE;QACT,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,QAAQ,EAAE,KAAK,CAAC;QACd,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC,CAAC;IACH,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE;QACR,EAAE,EAAE,MAAM,CAAC;QACX,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,CAAC,EAAE,WAAW,CAAC;KACvB,CAAC;IACF,QAAQ,EAAE,KAAK,CAAC;QACd,EAAE,EAAE,SAAS,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,OAAO,CAAC;KACjB,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,UAAW,SAAQ,YAAY,EAAE,YAAY;IAC5D,MAAM,IAAI,SAAS,CAAC;IACpB,OAAO,IAAI,WAAW,CAAC;IACvB,gBAAgB,CACd,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,OAAO,GACnB,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7C;AAMD;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,UAAU,GAClB,IAAI,CAkHN"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGxD,OAAO,KAAK,EAAE,YAAY,EAAe,MAAM,qBAAqB,CAAC;AACrE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE;QACP,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,QAAQ,CAAC,EAAE;QACT,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,QAAQ,EAAE,KAAK,CAAC;QACd,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC,CAAC;IACH,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE;QACR,EAAE,EAAE,MAAM,CAAC;QACX,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,CAAC,EAAE,WAAW,CAAC;KACvB,CAAC;IACF,QAAQ,EAAE,KAAK,CAAC;QACd,EAAE,EAAE,SAAS,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,OAAO,CAAC;QAChB,MAAM,EAAE,KAAK,GAAG,MAAM,EAAE,CAAC;KAC1B,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,UAAW,SAAQ,YAAY,EAAE,YAAY;IAC5D,MAAM,IAAI,SAAS,CAAC;IACpB,OAAO,IAAI,WAAW,CAAC;IACvB,UAAU,CACR,OAAO,EAAE,MAAM,EACf,MAAM,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,CAAA;KAAE,GACtD,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5C,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACvE;AAMD;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,UAAU,GAClB,IAAI,CAgKN"}

package/dist/api.js

@@ -26,16 +26,44 @@ export function registerRoutes(router, control) {
     });
     router.post("/sharing", (req, res) => {
         const body = (req.body ?? {});
-        if (typeof body.dataSet !== "string" || typeof body.public !== "boolean") {
+        const publicValue = typeof body.public === "boolean" ? body.public : undefined;
+        let groups;
+        if (body.groups === "all") {
+            groups = "all";
+        }
+        else if (Array.isArray(body.groups)) {
+            if (body.groups.some((id) => typeof id !== "string")) {
+                res.status(400).json({ ok: false, error: "groups must be strings" });
+                return;
+            }
+            groups = body.groups;
+        }
+        else if (body.groups !== undefined) {
             res
                 .status(400)
-                .json({ ok: false, error: "dataSet and public are required" });
+                .json({ ok: false, error: "groups must be 'all' or an array" });
+            return;
+        }
+        if (typeof body.dataSet !== "string" ||
+            (publicValue === undefined && groups === undefined)) {
+            res.status(400).json({
+                ok: false,
+                error: "dataSet and a sharing change are required",
+            });
             return;
         }
         void control
-            .setPublicSharing(body.dataSet, body.public)
+            .setSharing(body.dataSet, { public: publicValue, groups })
             .then((result) => sendGroup(res, result));
     });
+    router.post("/network/consent", (req, res) => {
+        const consent = (req.body ?? {}).consent;
+        if (typeof consent !== "string") {
+            res.status(400).json({ ok: false, error: "consent is required" });
+            return;
+        }
+        void control.setConsent(consent).then((result) => sendGroup(res, result));
+    });
     router.get("/claims", (_req, res) => {
         res.json({ claims: control.claims() });
     });
@@ -81,6 +109,16 @@ export function registerRoutes(router, control) {
             .promoteMember(req.body ?? {})
             .then((result) => sendGroup(res, result));
     });
+    router.post("/groups/rate", (req, res) => {
+        void control
+            .setRate(req.body ?? {})
+            .then((result) => sendGroup(res, result));
+    });
+    router.post("/groups/rate-cap", (req, res) => {
+        void control
+            .setRateCap(req.body ?? {})
+            .then((result) => sendGroup(res, result));
+    });
     router.post("/groups/leave", (req, res) => {
         void control
             .leaveGroup(req.body ?? {})

package/dist/api.js.map

@@ -1 +1 @@
-{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAqD7C,SAAS,SAAS,CAAC,GAAa,EAAE,MAAmB;IACnD,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAoB,EACpB,OAAmB;IAEnB,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QACpD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QACrD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QACpC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QACtD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACtD,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4C,CAAC;QACzE,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACzE,GAAG;iBACA,MAAM,CAAC,GAAG,CAAC;iBACX,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC,CAAC;YACjE,OAAO;QACT,CAAC;QACD,KAAK,OAAO;aACT,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC;aAC3C,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QACrD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QACrD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QAC9D,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACrD,KAAK,OAAO;aACT,WAAW,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;aAC3B,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC5D,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC1D,KAAK,OAAO;aACT,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;aACzB,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACrE,KAAK,OAAO;aACT,aAAa,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;aAC7B,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACpE,KAAK,OAAO;aACT,YAAY,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;aAC5B,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACrE,KAAK,OAAO;aACT,aAAa,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;aAC7B,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC3D,KAAK,OAAO;aACT,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;aAC1B,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC9D,MAAM,OAAO,GACX,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACvE,KAAK,OAAO;aACT,eAAe,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;aAC/B,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC/D,KAAK,OAAO;aACT,YAAY,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;aAC5B,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AA4D7C,SAAS,SAAS,CAAC,GAAa,EAAE,MAAmB;IACnD,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAoB,EACpB,OAAmB;IAEnB,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QACpD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QACrD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QACpC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QACtD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACtD,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAI3B,CAAC;QACF,MAAM,WAAW,GACf,OAAO,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,IAAI,MAAoC,CAAC;QACzC,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC1B,MAAM,GAAG,KAAK,CAAC;QACjB,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC;gBACrD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;gBACrE,OAAO;YACT,CAAC;YACD,MAAM,GAAG,IAAI,CAAC,MAAkB,CAAC;QACnC,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACrC,GAAG;iBACA,MAAM,CAAC,GAAG,CAAC;iBACX,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QACD,IACE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YAChC,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,CAAC,EACnD,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,2CAA2C;aACnD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,KAAK,OAAO;aACT,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;aACzD,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC9D,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;QACzC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QACD,KAAK,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QACrD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QACrD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QAC9D,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACrD,KAAK,OAAO;aACT,WAAW,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;aAC3B,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC5D,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC1D,KAAK,OAAO;aACT,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;aACzB,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACrE,KAAK,OAAO;aACT,aAAa,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;aAC7B,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACpE,KAAK,OAAO;aACT,YAAY,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;aAC5B,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACrE,KAAK,OAAO;aACT,aAAa,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;aAC7B,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC1D,KAAK,OAAO;aACT,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;aACvB,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC9D,KAAK,OAAO;aACT,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;aAC1B,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC3D,KAAK,OAAO;aACT,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;aAC1B,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC9D,MAAM,OAAO,GACX,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACvE,KAAK,OAAO;aACT,eAAe,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;aAC/B,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC/D,KAAK,OAAO;aACT,YAAY,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;aAC5B,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/config.d.ts

@@ -141,10 +141,15 @@ export interface InjectConfig {
     history: boolean;
     maxAgeSeconds: number;
 }
+export interface PolicyConfig {
+    /** Ed25519 public keys allowed to sign the network policy. */
+    operatorKeys: string[];
+}
 export interface Config {
     identity: {
         keyFile: string;
     };
+    policy: PolicyConfig;
     sharding: ShardingConfig;
     /** Optional always-on peers used to bootstrap or bridge CGNAT. */
     bootstrapPeers: string[];

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,SAAS;aAElB,EAAE,EAAE,UAAU;aACd,KAAK,EAAE,mBAAmB;aAC1B,WAAW,EAAE,iDAAiD;aAC9D,aAAa;aACb,aAAa,EAAE,KAAK;;aAGpB,EAAE,EAAE,UAAU;aACd,KAAK,EAAE,UAAU;aACjB,WAAW,EAAE,mDAAmD;aAChE,aAAa;aACb,aAAa,EAAE,KAAK;;aAGpB,EAAE,EAAE,YAAY;aAChB,KAAK,EAAE,qBAAqB;aAC5B,WAAW,EACT,iEAAiE;aACnE,aAAa;aACb,aAAa,EAAE,KAAK;;aAGpB,EAAE,EAAE,OAAO;aACX,KAAK,EAAE,OAAO;aACd,WAAW,EAAE,8CAA8C;aAC3D,aAAa;aACb,aAAa,EAAE,KAAK;;aAGpB,EAAE,EAAE,aAAa;aACjB,KAAK,EAAE,0BAA0B;aACjC,WAAW,EAAE,qCAAqC;aAClD,aAAa;aACb,aAAa,EAAE,KAAK;;aAGpB,EAAE,EAAE,MAAM;aACV,KAAK,EAAE,mBAAmB;aAC1B,WAAW,EAAE,yBAAyB;aACtC,aAAa;aACb,aAAa,EAAE,KAAK;;aAGpB,EAAE,EAAE,kBAAkB;aACtB,KAAK,EAAE,kCAAkC;aACzC,WAAW,EAAE,6DAA6D;aAC1E,aAAa;aACb,aAAa,EAAE,KAAK;;aAGpB,EAAE,EAAE,WAAW;aACf,KAAK,EAAE,aAAa;aACpB,WAAW,EAAE,cAAc;aAC3B,aAAa;aACb,aAAa,EAAE,MAAM;;aAGrB,EAAE,EAAE,iBAAiB;aACrB,KAAK,EAAE,oBAAoB;aAC3B,WAAW,EAAE,oBAAoB;aACjC,aAAa;aACb,aAAa,EAAE,MAAM;;aAGrB,EAAE,EAAE,cAAc;aAClB,KAAK,EAAE,gBAAgB;aACvB,WAAW,EAAE,2CAA2C;aACxD,aAAa;aACb,aAAa,EAAE,MAAM;;aAGrB,EAAE,EAAE,aAAa;aACjB,KAAK,EAAE,aAAa;aACpB,WAAW,EAAE,qDAAqD;aAClE,aAAa;aACb,aAAa,EAAE,MAAM;;aAGrB,EAAE,EAAE,QAAQ;aACZ,KAAK,EAAE,QAAQ;aACf,WAAW,EAAE,4DAA4D;aACzE,aAAa;aACb,aAAa,EAAE,KAAK;;aAGpB,EAAE,EAAE,YAAY;aAChB,KAAK,EAAE,YAAY;aACnB,WAAW,EAAE,yCAAyC;aACtD,aAAa;aACb,aAAa,EAAE,MAAM;;aAGrB,EAAE,EAAE,SAAS;aACb,KAAK,EAAE,SAAS;aAChB,WAAW,EAAE,0CAA0C;aACvD,aAAa;aACb,aAAa,EAAE,MAAM;EAEf,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;AAEzD,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,OAAO,CAAC;IAChB,qCAAqC;IACrC,MAAM,EAAE,KAAK,GAAG,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;AAE7D,MAAM,MAAM,WAAW,GACrB,SAAS,GAAG,gBAAgB,GAAG,cAAc,GAAG,iBAAiB,CAAC;AAEpE,MAAM,MAAM,OAAO,GAAG,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,KAAK,CAAC;AAE/D,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE7C,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,WAAW,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,wBAAwB,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,cAAc;IAC7B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,6DAA6D;IAC7D,YAAY,EAAE,OAAO,CAAC;IACtB,uCAAuC;IACvC,SAAS,EAAE,OAAO,CAAC;IACnB,6CAA6C;IAC7C,SAAS,EAAE,OAAO,CAAC;IACnB,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,SAAU,SAAQ,aAAa;IAC9C,IAAI,EAAE,OAAO,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,MAAM;IACrB,QAAQ,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9B,QAAQ,EAAE,cAAc,CAAC;IACzB,kEAAkE;IAClE,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,QAAQ,EAAE,cAAc,CAAC;IACzB,QAAQ,EAAE,cAAc,CAAC;IACzB,OAAO,EAAE,aAAa,CAAC;IACvB,GAAG,EAAE,SAAS,CAAC;IACf,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,MAAM,EAAE,YAAY,CAAC;CACtB;AAaD,wBAAgB,aAAa,IAAI,MAAM,CAmDtC;AAED,wBAAgB,aAAa,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAuB/D;AAED,wBAAgB,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA0ThD"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS;aAElB,EAAE,EAAE,UAAU;aACd,KAAK,EAAE,mBAAmB;aAC1B,WAAW,EAAE,iDAAiD;aAC9D,aAAa;aACb,aAAa,EAAE,KAAK;;aAGpB,EAAE,EAAE,UAAU;aACd,KAAK,EAAE,UAAU;aACjB,WAAW,EAAE,mDAAmD;aAChE,aAAa;aACb,aAAa,EAAE,KAAK;;aAGpB,EAAE,EAAE,YAAY;aAChB,KAAK,EAAE,qBAAqB;aAC5B,WAAW,EACT,iEAAiE;aACnE,aAAa;aACb,aAAa,EAAE,KAAK;;aAGpB,EAAE,EAAE,OAAO;aACX,KAAK,EAAE,OAAO;aACd,WAAW,EAAE,8CAA8C;aAC3D,aAAa;aACb,aAAa,EAAE,KAAK;;aAGpB,EAAE,EAAE,aAAa;aACjB,KAAK,EAAE,0BAA0B;aACjC,WAAW,EAAE,qCAAqC;aAClD,aAAa;aACb,aAAa,EAAE,KAAK;;aAGpB,EAAE,EAAE,MAAM;aACV,KAAK,EAAE,mBAAmB;aAC1B,WAAW,EAAE,yBAAyB;aACtC,aAAa;aACb,aAAa,EAAE,KAAK;;aAGpB,EAAE,EAAE,kBAAkB;aACtB,KAAK,EAAE,kCAAkC;aACzC,WAAW,EAAE,6DAA6D;aAC1E,aAAa;aACb,aAAa,EAAE,KAAK;;aAGpB,EAAE,EAAE,WAAW;aACf,KAAK,EAAE,aAAa;aACpB,WAAW,EAAE,cAAc;aAC3B,aAAa;aACb,aAAa,EAAE,MAAM;;aAGrB,EAAE,EAAE,iBAAiB;aACrB,KAAK,EAAE,oBAAoB;aAC3B,WAAW,EAAE,oBAAoB;aACjC,aAAa;aACb,aAAa,EAAE,MAAM;;aAGrB,EAAE,EAAE,cAAc;aAClB,KAAK,EAAE,gBAAgB;aACvB,WAAW,EAAE,2CAA2C;aACxD,aAAa;aACb,aAAa,EAAE,MAAM;;aAGrB,EAAE,EAAE,aAAa;aACjB,KAAK,EAAE,aAAa;aACpB,WAAW,EAAE,qDAAqD;aAClE,aAAa;aACb,aAAa,EAAE,MAAM;;aAGrB,EAAE,EAAE,QAAQ;aACZ,KAAK,EAAE,QAAQ;aACf,WAAW,EAAE,4DAA4D;aACzE,aAAa;aACb,aAAa,EAAE,KAAK;;aAGpB,EAAE,EAAE,YAAY;aAChB,KAAK,EAAE,YAAY;aACnB,WAAW,EAAE,yCAAyC;aACtD,aAAa;aACb,aAAa,EAAE,MAAM;;aAGrB,EAAE,EAAE,SAAS;aACb,KAAK,EAAE,SAAS;aAChB,WAAW,EAAE,0CAA0C;aACvD,aAAa;aACb,aAAa,EAAE,MAAM;EAEf,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;AAEzD,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,OAAO,CAAC;IAChB,qCAAqC;IACrC,MAAM,EAAE,KAAK,GAAG,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;AAE7D,MAAM,MAAM,WAAW,GACrB,SAAS,GAAG,gBAAgB,GAAG,cAAc,GAAG,iBAAiB,CAAC;AAEpE,MAAM,MAAM,OAAO,GAAG,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,KAAK,CAAC;AAE/D,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE7C,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,WAAW,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,wBAAwB,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,cAAc;IAC7B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,6DAA6D;IAC7D,YAAY,EAAE,OAAO,CAAC;IACtB,uCAAuC;IACvC,SAAS,EAAE,OAAO,CAAC;IACnB,6CAA6C;IAC7C,SAAS,EAAE,OAAO,CAAC;IACnB,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,SAAU,SAAQ,aAAa;IAC9C,IAAI,EAAE,OAAO,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,8DAA8D;IAC9D,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,MAAM;IACrB,QAAQ,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9B,MAAM,EAAE,YAAY,CAAC;IACrB,QAAQ,EAAE,cAAc,CAAC;IACzB,kEAAkE;IAClE,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,QAAQ,EAAE,cAAc,CAAC;IACzB,QAAQ,EAAE,cAAc,CAAC;IACzB,OAAO,EAAE,aAAa,CAAC;IACvB,GAAG,EAAE,SAAS,CAAC;IACf,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,MAAM,EAAE,YAAY,CAAC;CACtB;AAaD,wBAAgB,aAAa,IAAI,MAAM,CAoDtC;AAED,wBAAgB,aAAa,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAwB/D;AAED,wBAAgB,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAgChD"}