feat: age verification with an ID document (Didit), and closed registration

Age: a Didit provider behind the vendor-neutral age interface. A person
verifies once (ID document, passive liveness, face match) and all their
linked IMVU accounts count as adult. Webhooks are checked against Didit's
signatures; only "over 18" is kept. A later answer replaces an earlier one
(an approval taken back is revoked). Checks are limited: one unfinished
check per person, 3 in 30 days, none once verified, and a monthly cap
(DIDIT_MONTHLY_LIMIT, default 30: Didit's free plan is $10 of credit a
month and a check costs $0.30). The Account page gets an Age Verification
card.

Registration: open or closed, an admin's setting in the console
(default from REGISTRATION). Closed: new accounts can only sign in until
a moderator approves them (or declines, deleting the account); the
website shows them a waiting page and the API treats them as signed out.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

apps/web/app/console/page.tsx

@@ -1,19 +1,24 @@
 import type { Metadata } from "next";
+import Link from "next/link";
+import { ActionForm, SubmitButton } from "@/components/forms";
 import { OnlineList } from "@/components/online-list";
 import { PageHeader } from "@/components/status";
 import { DateTime } from "@/components/time";
 import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "@/components/ui/card";
+import { NativeSelect, NativeSelectOption } from "@/components/ui/native-select";
 import { Table, TableBody, TableCell, TableHead, TableHeader, TableRow } from "@/components/ui/table";
 import { api, unwrap, type AuditEntry } from "@/lib/api";
+import { setRegistration } from "./actions";
 import { ConsoleNav, requireModerator } from "./console-nav";
 
 export const metadata: Metadata = { title: "Console" };
 
 export default async function Console() {
-  await requireModerator("/console");
-  const data = unwrap(await api.console.get());
+  const me = await requireModerator("/console");
+  const [data, settings] = await Promise.all([api.console.get().then(unwrap), api.console.settings.get().then(unwrap)]);
   const stats = [
     { label: "People", value: data.counts.people, note: "accounts" },
+    { label: "Waiting", value: data.counts.waiting, note: "for approval", href: "/console/people?waiting=true" },
     { label: "IMVU accounts", value: data.counts.links, note: "linked" },
     { label: "Computers", value: data.counts.computers, note: "signed in" },
   ];
@@ -23,18 +28,50 @@ export default async function Console() {
       <PageHeader title="Console">Moderation.</PageHeader>
       <ConsoleNav />
       <div className="space-y-6">
-        <div className="grid gap-4 sm:grid-cols-3">
+        <div className="grid gap-4 sm:grid-cols-2 lg:grid-cols-4">
           {stats.map((s) => (
             <Card key={s.label}>
               <CardHeader>
                 <CardDescription>{s.label}</CardDescription>
                 <CardTitle className="text-3xl font-semibold tabular-nums">{s.value}</CardTitle>
               </CardHeader>
-              <CardContent className="text-sm text-muted-foreground">{s.note}</CardContent>
+              <CardContent className="text-sm text-muted-foreground">
+                {s.href ? (
+                  <Link href={s.href} className="underline-offset-4 hover:underline">
+                    {s.note}
+                  </Link>
+                ) : (
+                  s.note
+                )}
+              </CardContent>
             </Card>
           ))}
         </div>
 
+        <Card>
+          <CardHeader>
+            <CardTitle>Registration</CardTitle>
+            <CardDescription>
+              {settings.registration === "closed"
+                ? "Closed: new accounts can sign in, but wait for a moderator's approval."
+                : "Open: new accounts can use the hub at once."}
+            </CardDescription>
+          </CardHeader>
+          {me.role === "admin" && (
+            <CardContent>
+              <ActionForm action={setRegistration}>
+                <div className="flex gap-2">
+                  <NativeSelect name="registration" defaultValue={settings.registration} aria-label="Registration">
+                    <NativeSelectOption value="open">Open</NativeSelectOption>
+                    <NativeSelectOption value="closed">Closed</NativeSelectOption>
+                  </NativeSelect>
+                  <SubmitButton pendingLabel="Setting…">Set</SubmitButton>
+                </div>
+              </ActionForm>
+            </CardContent>
+          )}
+        </Card>
+
         <Card>
           <CardHeader>
             <CardTitle>Online now</CardTitle>