diff --git a/chain.js b/chain.js
index b9e0f23..e973757 100644
--- a/chain.js
+++ b/chain.js
@@ -667,6 +667,15 @@ function getOrgShare(rootId) {
};
}
+// Wallet address -> position id (for wallet-verified messaging sign-in).
+// One position per address by contract design.
+function memberIdByAccount(address) {
+ if (!state || !address) return null;
+ const a = String(address).toLowerCase();
+ for (const [id, m] of Object.entries(state.members)) if (m.account === a) return Number(id);
+ return null;
+}
+
// Company-rotation pick: breadth-first (matrix order, left→right) first
// position under `rootId` that still needs directs — the "next open team
// position" for the public rotation when publicRotationMode==='chain'.
@@ -735,4 +744,4 @@ async function getIncome(id) {
};
}
-module.exports = { startIndexer, getPayoutsPublic, verifyMember, memberLookup, memberPublic, getIncome, getOwnerUpgradeNeeds, getOrgRouting, getOrgShare, getCoachingScan, getMatrixTree, isInTeam, nextOpenPosition, balanceOf, CONTRACT };
+module.exports = { startIndexer, getPayoutsPublic, verifyMember, memberLookup, memberPublic, getIncome, getOwnerUpgradeNeeds, getOrgRouting, getOrgShare, getCoachingScan, getMatrixTree, isInTeam, nextOpenPosition, memberIdByAccount, balanceOf, CONTRACT };
diff --git a/messages.js b/messages.js
new file mode 100644
index 0000000..8fc236c
--- /dev/null
+++ b/messages.js
@@ -0,0 +1,161 @@
+// RM Circle — wallet-verified member messaging.
+// Identity = the wallet that owns a position (proved by a free personal_sign,
+// verified server-side via vendored keccak256 + secp256k1 recovery — the two
+// files in ./vendor are pinned; see the commit that added them).
+// Permission = the matrix: you may message your own downline (direct or
+// broadcast) and your own upline chain. Nothing else. Admin can review all
+// messages (disclosed in the UI).
+'use strict';
+const fs = require('fs');
+const path = require('path');
+const crypto = require('crypto');
+const secp = require('./vendor/secp256k1.js');
+const sha3 = require('./vendor/sha3.js');
+const keccak256 = sha3.keccak256;
+
+secp.utils.hmacSha256Sync = (key, ...msgs) => {
+ const h = crypto.createHmac('sha256', Buffer.from(key));
+ msgs.forEach(m => h.update(Buffer.from(m)));
+ return Uint8Array.from(h.digest());
+};
+
+const SESSION_TTL = 30 * 24 * 3600 * 1000;
+const CHALLENGE_TTL = 10 * 60 * 1000;
+const MAX_BODY = 1500;
+const MAX_STORE = 5000;
+const DAILY_DIRECT = 30, DAILY_BROADCAST = 3;
+
+let DATA_DIR = null, chain = null, IS_PROD = false;
+let sessions = new Map(); // token -> {address, id, expires}
+const challenges = new Map(); // addressLower -> {message, exp}
+
+const MSG_FILE = () => path.join(DATA_DIR, 'messages.json');
+const SESS_FILE = () => path.join(DATA_DIR, 'msg-sessions.json');
+function readJson(f, fb) { try { return JSON.parse(fs.readFileSync(f, 'utf8')); } catch (e) { return fb; } }
+function writeJson(f, v) { fs.writeFileSync(f, JSON.stringify(v)); }
+function loadSessions() { const o = readJson(SESS_FILE(), {}); sessions = new Map(Object.entries(o).filter(([, s]) => s.expires > Date.now())); }
+function saveSessions() { writeJson(SESS_FILE(), Object.fromEntries(sessions)); }
+function getMessages() { return readJson(MSG_FILE(), []); }
+function saveMessages(m) { writeJson(MSG_FILE(), m.slice(-MAX_STORE)); }
+
+function init(opts) { DATA_DIR = opts.dataDir; chain = opts.chain; IS_PROD = !!opts.isProd; loadSessions(); }
+
+// ---- crypto ----
+function personalDigest(msg) {
+ const m = Buffer.from(msg, 'utf8');
+ const pre = Buffer.from('\x19Ethereum Signed Message:\n' + m.length, 'utf8');
+ return Buffer.from(keccak256(Buffer.concat([pre, m])), 'hex');
+}
+function recoverAddress(msg, signature) {
+ const raw = Buffer.from(String(signature).replace(/^0x/, ''), 'hex');
+ if (raw.length !== 65) throw new Error('Bad signature length');
+ let v = raw[64]; if (v >= 27) v -= 27;
+ if (v !== 0 && v !== 1) throw new Error('Bad signature recovery byte');
+ const pub = secp.recoverPublicKey(personalDigest(msg), raw.slice(0, 64), v, false);
+ return '0x' + keccak256(Buffer.from(pub.slice(1))).slice(-40);
+}
+
+// ---- auth ----
+const ADDR_RE = /^0x[0-9a-fA-F]{40}$/;
+function makeChallenge(address) {
+ const a = address.toLowerCase();
+ const nonce = crypto.randomBytes(16).toString('hex');
+ const message = `RM Circle member sign-in\n\nWallet: ${a}\nNonce: ${nonce}\n\nSigning is free, proves you own this wallet to rmcircle.team, and cannot move funds or approve anything.`;
+ challenges.set(a, { message, exp: Date.now() + CHALLENGE_TTL });
+ return message;
+}
+function verifyChallenge(address, signature) {
+ const a = address.toLowerCase();
+ const ch = challenges.get(a);
+ if (!ch || ch.exp < Date.now()) return { error: 'Challenge expired - tap sign-in again.' };
+ let rec;
+ try { rec = recoverAddress(ch.message, signature); } catch (e) { return { error: 'Invalid signature: ' + e.message }; }
+ if (rec !== a) return { error: 'Signature does not match this wallet.' };
+ challenges.delete(a);
+ const id = chain.memberIdByAccount(a);
+ if (!id) return { error: 'No RM Circle position is registered to this wallet.' };
+ const token = crypto.randomBytes(32).toString('hex');
+ sessions.set(token, { address: a, id, expires: Date.now() + SESSION_TTL });
+ saveSessions();
+ return { token, id };
+}
+function authFromCookie(req) {
+ const m = /(?:^|;\s*)ctb\.msid=([^;]+)/.exec(req.headers.cookie || '');
+ if (!m) return null;
+ const s = sessions.get(decodeURIComponent(m[1]));
+ if (!s || s.expires < Date.now()) return null;
+ return s;
+}
+function sessionCookie(token) {
+ return `ctb.msid=${encodeURIComponent(token)}; Path=/; HttpOnly; SameSite=Lax; Max-Age=${SESSION_TTL / 1000}${IS_PROD ? '; Secure' : ''}`;
+}
+
+// ---- permissions ----
+function canMessage(fromId, toId) {
+ if (fromId === toId) return false;
+ return chain.isInTeam(toId, fromId) || chain.isInTeam(fromId, toId);
+}
+function isRecipient(msg, myId) {
+ if (msg.toId === myId) return true;
+ if (msg.org && msg.fromId !== myId && chain.isInTeam(myId, msg.fromId)) return true;
+ return false;
+}
+
+// ---- operations ----
+function sanitizeBody(b) {
+ return String(b || '').replace(/\r/g, '').replace(/[\u0000-\u0008\u000b-\u001f\u007f]/g, '').trim().slice(0, MAX_BODY);
+}
+function send(sess, body) {
+ const text = sanitizeBody(body.body);
+ if (!text) return { error: 'Write a message first.' };
+ const org = !!body.org;
+ const msgs = getMessages();
+ const dayAgo = Date.now() - 24 * 3600 * 1000;
+ const mine = msgs.filter(m => m.fromId === sess.id && m.ts > dayAgo);
+ if (org && mine.filter(m => m.org).length >= DAILY_BROADCAST) return { error: `Broadcast limit reached (${DAILY_BROADCAST}/day).` };
+ if (!org && mine.filter(m => !m.org).length >= DAILY_DIRECT) return { error: `Daily message limit reached (${DAILY_DIRECT}/day).` };
+ let toId = 0;
+ if (!org) {
+ toId = Number(body.toId);
+ if (!Number.isInteger(toId) || toId < 1) return { error: 'Enter the member ID to send to.' };
+ if (!canMessage(sess.id, toId)) return { error: `#${toId} is not in your team or upline - messaging follows your matrix lines only.` };
+ }
+ const rec = { mid: crypto.randomBytes(8).toString('hex'), fromId: sess.id, toId, org, body: text, ts: Date.now(), read: {} };
+ msgs.push(rec);
+ saveMessages(msgs);
+ return { ok: true, mid: rec.mid };
+}
+function inbox(sess) {
+ const msgs = getMessages();
+ const forMe = [], sent = [];
+ for (const m of msgs) {
+ if (m.fromId === sess.id) sent.push(m);
+ else if (isRecipient(m, sess.id)) forMe.push(m);
+ }
+ const shape = (m, mine) => ({ mid: m.mid, fromId: m.fromId, toId: m.toId || null, org: !!m.org, body: m.body, ts: m.ts, read: mine ? undefined : !!(m.read && m.read[sess.id]), mine });
+ return {
+ id: sess.id,
+ inbox: forMe.slice(-100).reverse().map(m => shape(m, false)),
+ sent: sent.slice(-30).reverse().map(m => shape(m, true))
+ };
+}
+function markRead(sess, mids) {
+ const msgs = getMessages();
+ let changed = false;
+ for (const m of msgs) {
+ if (mids.includes(m.mid) && isRecipient(m, sess.id) && !(m.read && m.read[sess.id])) {
+ m.read = m.read || {}; m.read[sess.id] = Date.now(); changed = true;
+ }
+ }
+ if (changed) saveMessages(msgs);
+ return { ok: true };
+}
+function unreadCount(id) {
+ if (!Number.isInteger(id) || id < 1) return 0;
+ return getMessages().filter(m => isRecipient(m, id) && !(m.read && m.read[id])).length;
+}
+function adminList() {
+ return getMessages().slice(-300).reverse().map(m => ({ mid: m.mid, fromId: m.fromId, toId: m.toId || null, org: !!m.org, body: m.body, ts: m.ts, readCount: Object.keys(m.read || {}).length }));
+}
+
+module.exports = { init, makeChallenge, verifyChallenge, authFromCookie, sessionCookie, send, inbox, markRead, unreadCount, adminList, ADDR_RE };
diff --git a/public/admin.html b/public/admin.html
index bb44b23..7f3e99d 100644
--- a/public/admin.html
+++ b/public/admin.html
@@ -6,6 +6,7 @@
Member ID Submissions
New members who confirmed their purchase on the start page. Each one was posted to your Hermes Telegram chat — add them to the rotation.
When
Name / Handle
New ID
Joined under
Source
On-chain
Your Organization vs. the Network
How your team — rooted at your top ID — stacks up against the entire RM Circle smart contract. Live on-chain.
Reading the blockchain…
Coaching Radar
Live triage of your whole org: who to nudge, what to tell them, and how much POL is on the line. Computed fresh from the chain index on every refresh.
Loading…
+
Member Messages
Wallet-verified member-to-member messages, newest first. Admin can review for abuse — members are told this in the UI.
When
From
To
Message
Read by
Loading…
My Positions — Income
Every payment received by your own positions, live from the contract. Comma-separated IDs — saved for next time.
On-Chain Member Lookup
Enter an RM Circle ID to read its registration, lineage, and every payment it has received — live from the smart contract.
Matrix View
The entire on-chain matrix — who landed where, with tier, level, directs, and earnings per position. Click a position to drill down.
diff --git a/public/admin.js b/public/admin.js
index 5356aae..f9fcc9f 100644
--- a/public/admin.js
+++ b/public/admin.js
@@ -41,6 +41,7 @@ function render(){
const orgEl=document.getElementById('orgRoot');if(orgEl&&!orgEl.value)orgEl.value=state.config.orgRootId||'21';
if(!orgShareAutoLoaded&&orgEl&&orgEl.value){orgShareAutoLoaded=true;loadOrgShare();}
if(!coachAutoLoaded){coachAutoLoaded=true;loadCoaching();}
+ if(!msgsAutoLoaded){msgsAutoLoaded=true;loadAdminMsgs();}
const efi=document.getElementById('emailFromInput');if(efi&&!efi.value)efi.value=state.config.emailFrom||em.from||'';
const f=document.getElementById('configForm'),c=state.config;for(const k of ['siteName','programName','bridgeHeadline','bridgeSubheadline','premiumEntryPol','dappReferralBaseUrl','telegramUrl','supportLabel','bemobPostbackUrl','telegramBotToken','telegramChatId','telegramTopicId','teamRootId','teamAlertEmail','ownerAlertEmail'])if(f.elements[k])f.elements[k].value=c[k]??'';f.elements.showSponsorName.checked=!!c.showSponsorName;f.elements.showQueueProgress.checked=!!c.showQueueProgress;
}
@@ -121,6 +122,15 @@ async function loadCoaching(){
}
const cr=document.getElementById('coachRefresh');if(cr)cr.addEventListener('click',loadCoaching);
let coachAutoLoaded=false;
+async function loadAdminMsgs(){
+ const tb=document.getElementById('msgRows');if(!tb)return;
+ try{
+ const d=await api('/api/admin/messages');
+ tb.innerHTML=(d.messages||[]).map(m=>`
${esc(new Date(m.ts).toLocaleString())}
#${m.fromId}
${m.org?'📣 whole team':'#'+m.toId}
${esc(m.body)}
${m.readCount}
`).join('')||'
No messages yet.
';
+ }catch(x){tb.innerHTML=`
${esc(x.message)}
`}
+}
+const mr=document.getElementById('msgRefresh');if(mr)mr.addEventListener('click',loadAdminMsgs);
+let msgsAutoLoaded=false;
let incomeAutoLoaded=false;
async function loadIncome(){
const ids=(document.getElementById('incomeIds').value||'').trim();
diff --git a/public/chat.js b/public/chat.js
index 67c507a..568320f 100644
--- a/public/chat.js
+++ b/public/chat.js
@@ -48,8 +48,8 @@
a:()=>`Two ways money reaches your position — the full diagram is at rmcircle.team/how-pay-works. (1) Entry rewards: when a direct joins under your link you get their entry reward (about 326 POL at Premium) and you keep it — on every direct you bring. (2) Upgrade payments: each person below you pays you once, at the ONE level that matches how far below you they sit — someone 1 layer below pays you when they hit Ascensus, 2 layers below pays you at Fabrica, 3 at Culmen, and so on. To catch each, you must be at that level yourself and qualified, so stay one level ahead of your team. No income is guaranteed.`},
{k:['tier','standard','premium tier','standard tier','premium vs standard','which tier','half','smaller payment','less than expected','why is my payment'],
a:()=>`There are two tiers. Premium is what our whole team builds at (${pol()} POL entry) — full payments. Standard costs about half and pays/earns half at every level. So if a payment ever comes in smaller than expected, it usually came from a Standard-tier position below you. Your tier is set when you join and can't be changed later (upgrading advances your level, not your tier), so always join Premium and make sure the people you bring on do too. Full breakdown: how-pay-works.`},
- {k:['dashboard','my dashboard','my page','my position','my team','check my','see my','pipeline','my stats','alerts','notify me','email me','get notified'],
- a:()=>`Your Member Dashboard is at rmcircle.team/my — enter your ID to see your position, your team (with a depth summary showing members per generation), your payments, your pipeline (money forming below you), any spillover under you, and a Coach Your Team panel that tells you exactly who in your leg needs a nudge and what to say. You can also turn on email alerts there to be notified the moment you're paid or need to upgrade. To share, use your personal invite page: rmcircle.team/join/<your ID>.`},
+ {k:['dashboard','my dashboard','my page','my position','my team','check my','see my','pipeline','my stats','alerts','notify me','email me','get notified','message','messages','contact my sponsor','contact my upline','contact my downline','reach my team'],
+ a:()=>`Your Member Dashboard is at rmcircle.team/my — enter your ID to see your position, your team (with a depth summary showing members per generation), your payments, your pipeline (money forming below you), any spillover under you, and a Coach Your Team panel that tells you exactly who in your leg needs a nudge and what to say. You can also turn on email alerts there, and use Messages — wallet-verified messaging with your upline and your team (sign in once with your wallet; no email needed; only people on your matrix lines can message you). To share, use your personal invite page: rmcircle.team/join/<your ID>.`},
{k:['level','levels','upgrade','scintilla','ascensus','fabrica','culmen','apex','fastigium','vertex','corona','8 levels'],
a:()=>`There are 8 Premium levels: Scintilla, Ascensus, Fabrica, Culmen, Apex, Fastigium, Vertex, Corona. Everyone starts at Scintilla. Upgrade as quickly as practical — ideally using earned POL — because the first two payments at each level are designed to help fund your next upgrade. Stay aware of your active downline's levels so you don't fall behind.`},
{k:['30 positions','goal','milestone','matrix','how many people','team size'],
diff --git a/public/my.html b/public/my.html
index 6480aab..860fdbb 100644
--- a/public/my.html
+++ b/public/my.html
@@ -20,6 +20,7 @@
Your team
Your position's matrix — the rollup line on each card counts everyone underneath, all the way down. Click a position to drill into that leg. Open slots are where the next placements land.
✓ qualified (2/2 directs) · P Premium · S Standard · ⬇ everyone below that position (all generations) and the POL they've earned · ↧ spillover = placed there by upline activity; only members who join with a position's own ID count toward its 2/2
Your pipeline
Money forming below you. Each generation in your leg pays your position at exactly one level — when a member's level catches up to their depth, their next upgrade comes to you.
Coach your team
The fastest way to grow your own income is helping the people below you take their next step. Here's who in your team could use a nudge today — updated live from the blockchain.
+
Messages 🔔 0
Wallet-verified messaging along your matrix lines — your upline and your team can reach you here, and you can reach them. No email needed; your wallet is your identity. Messages are member-to-member; the team admin can review them for abuse.
Loading…
Email me my alerts
Get an email the moment this position is paid, and when it needs an upgrade to catch incoming pay — so you never miss one. Opt in with your email; unsubscribe anytime.