feat: p2p wifi hotspot sync - server apis and webapp integration

[paulpascal]

Summary

Adds P2P WiFi Hotspot sync capability to CHT, enabling CHWs in offline areas to push health data to a Supervisor's phone over a local WiFi connection. The Supervisor relays data to the msain server on next online sync.

This PR covers the server-side APIs and webapp integration. The related Android PR is at medic/cht-android#431.

What's included

Server API endpoints (api/src/p2p/):

• POST /api/v1/p2p/authorize : Issues JWT token with ECDSA P-256 for offline device authentication
• GET /api/v1/p2p/config/:facility_id : Returns P2P configuration for a facility
• GET /api/v1/p2p/revocation-list : Returns revoked devices/users
• POST /api/v1/p2p/telemetry : Receives session telemetry (fire-and-forget)

Webapp P2P module (webapp/src/ts/modules/p2p/):

• Status page with host/peer controls, QR code display, sync progress
• History page showing past sync sessions
• Config service reads p2p_sync from app_settings
• Transit filter service hides relayed docs from UI (contacts, reports, search, tasks, targets)
• Transit purge service soft-deletes relayed docs after server delivery confirmed

Key design decisions:

• Roles are fully config-driven via host_roles and peer_roles in app_settings : no hardcoded role names
• Transit docs use soft-delete (_deleted: true + purged: true) with replication filter, not db.remove() which would create destructive tombstones
• Documents written with new_edits: false for automatic CouchDB deduplication
• Supports both new sidebar nav and old header nav
• 86 built-in translation keys

Eg. of configuration:

{
  "p2p_sync": {
    "enabled": true,
    "host_roles": ["supervisor"],
    "peer_roles": ["chw"]
  }
}

Files changed

• 6 new API endpoint files + routing
• 6 new Angular components/services
• 3 new P2P services (config, transit filter, transit purge)
• 86 translation keys
• Append-only modifications to: routing.js, sidebar-menu, header, contacts, reports, search, rules-engine, target-aggregates, db-sync, old-nav.less
• 5 test spec files

Test plan

• P2P menu visible for users with configured host/peer roles
• P2P menu works in both old nav (dropdown) and new nav (sidebar)
• Authorize endpoint returns JWT for users with matching roles
• Config endpoint returns p2p_sync settings
• Transit docs filtered from contacts, reports, search, tasks, targets
• Purge triggers after successful server sync
• Unit tests pass: npx mocha api/tests/p2p/**/*.spec.js

Code review checklist

• UI/UX backwards compatible: Test it works for the new design (enabled by default). And test it works in the old design, enable can_view_old_navigation permission to see the old design. Test it has appropriate design for RTL languages.
• Readable: Concise, well named, follows the style guide
• Documented: Configuration and user documentation on cht-docs
• Tested: Unit and/or e2e where appropriate
• Internationalised: All user facing text
• Backwards compatible: Works with existing data and configuration or includes a migration. Any breaking changes documented in the release notes.
• AI disclosure: Please disclose use of AI per the guidelines.

License

The software is provided under AGPL-3.0. Contributions to this project are accepted under the same license.

[mrjones-plip]

wow!! what an epic PR @paulpascal - impressive!!

I've added back in a Code review checklist and License section above which should be on every PR per our template. Can you please edit the checklise to be accurate for this PR?

Thanks!

[paulpascal]

Thanks @mrjones-plip , well noted, will promptly updated the checklist accordingly