@toon-protocol/townhouse 0.1.0-rc5

package/dist/compose/townhouse-hs.yml

@@ -0,0 +1,276 @@
+# Townhouse — Hidden Service mode (HS) operator compose template
+#
+# THIS IS A BUILD-TIME TEMPLATE. Do not use it directly.
+# The digest placeholders (${TOON_*_DIGEST}) are substituted by
+# scripts/render-compose-template.mjs during `pnpm build` (when
+# dist/image-manifest.json is present) to produce the fully-resolved
+# dist/compose/townhouse-hs.yml that ships inside the npm tarball.
+#
+# Resolved copy location at runtime: ~/.townhouse/compose/townhouse-hs.yml
+#   - Written by materializeComposeTemplate('hs') in packages/townhouse/src/compose-loader.ts
+#   - File mode: 0o600 (operator-secret — may embed private keys at deploy time)
+#
+# Story ownership:
+#   - Placeholder substitution: Story 45.2 (this file)
+#   - Boot sequence (townhouse hs up): Story 45.4
+#
+# Architecture (HS-mode v1, Epic 45):
+#   - Apex connector: standalone, anon HS publishing in-process (connector v3.5.x)
+#   - townhouse-api: containerized host API — owns /var/run/docker.sock, calls
+#     connector admin API, manages lifecycle for lazy-provisioned peers
+#   - town/mill/dvm: lazy-provisioned via Docker Compose profiles (Epic 46)
+#     Story 45.4 boots only connector + townhouse-api at apex install
+#
+# Digest placeholders (substituted at build time from dist/image-manifest.json):
+#   @sha256:48cb3df422019e252b7b1b5506b2fc666ea206ec57024eb68acbf781ebeb1f11 → @sha256:<hex>
+#   @sha256:ba83fb6df536dec240f27fb7449db59e803207221c54e61ea019375ddc0461a0         → @sha256:<hex>
+#   @sha256:38e8c6460a3fc562dab28284b4f51958d8417ce10a7152bbb4224fc00cc42df5         → @sha256:<hex>
+#   @sha256:26a2aff4cb490d11f8eab9cff3272475c951e7cc87378a1af6c702b529d74e10          → @sha256:<hex>
+#   @sha256:4a24ccb0997d7b025997e670546032f6a84cd18a77c490509016b85e181a344e    → @sha256:<hex>
+#
+# Scope guard (Story 45.2 does NOT include):
+#   - ator-sidecar / ator-sidecar-relay (connector v3.5.x does HS publishing in-process)
+#   - anvil / solana / faucet (dev-stack concerns, not operator-facing)
+#   - build: directives (all images are digest-pinned GHCR pulls)
+#
+# Port allocation (HS-mode binds canonical ports — single-tenant operator box):
+#   127.0.0.1:9401   connector admin
+#   127.0.0.1:28090  townhouse-api Fastify
+#   127.0.0.1:7100,3100  town (relay WS, BLS health) — profile gated
+#   127.0.0.1:3200   mill BLS health — profile gated
+#   127.0.0.1:3400   dvm BLS health — profile gated
+#
+#   These collide with the contributor dev stack's 28xxx-namespaced bindings
+#   (28080:9401, 28100:3100, 28110:3100, 28200:3200, 28210:3200, 28400:3400,
+#   28700:7100, 28710:7100). HS-mode and the contributor dev stack
+#   (scripts/townhouse-dev-infra.sh) MUST NOT run concurrently on the same
+#   machine. If you need to run multiple townhouse instances on a multi-tenant
+#   box, open an enhancement issue — the canonical ports here are intentional
+#   for the apex operator path (Story 45.4 `townhouse hs up`).
+
+networks:
+  townhouse-hs-net:
+    driver: bridge
+
+volumes:
+  # Named volume for the connector's .anyone keypair + HS state.
+  # Survives `docker compose down`; delete to rotate the .anyone address.
+  townhouse-hs-anon:
+  townhouse-hs-town-data:
+  townhouse-hs-mill-data:
+  townhouse-hs-dvm-data:
+
+services:
+  # ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+  # Apex connector — terminates inbound BTP, publishes .anyone HS
+  #
+  # The connector image embeds @anyone-protocol/anyone-client v1.1.x+
+  # which handles HS publishing in-process (no sidecar required for v3.5.x+).
+  # Config file written by `townhouse hs up` (Story 45.4) on first-run.
+  #
+  # NFR7: connector MUST NOT mount /var/run/docker.sock.
+  # ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+  connector:
+    image: ghcr.io/toon-protocol/connector@sha256:4a24ccb0997d7b025997e670546032f6a84cd18a77c490509016b85e181a344e
+    container_name: townhouse-hs-connector
+    hostname: connector
+    networks:
+      - townhouse-hs-net
+    ports:
+      # Admin API on host loopback only (NFR9). Operator uses for status.
+      - '127.0.0.1:9401:9401'
+    volumes:
+      # Rendered connector config (Story 45.4 writes this on first-run).
+      - ~/.townhouse/connector.yaml:/config/connector.yaml:ro
+      # .anyone keypair + HS state (persists across down/up cycles).
+      - townhouse-hs-anon:/var/lib/anon/hs
+    environment:
+      CONFIG_FILE: /config/connector.yaml
+    healthcheck:
+      # nosemgrep: trailofbits.generic.wget-unencrypted-url.wget-unencrypted-url -- container-internal probe
+      test: ['CMD', 'wget', '-q', '--spider', 'http://localhost:9401/health']
+      interval: 10s
+      timeout: 5s
+      retries: 5
+      start_period: 30s
+    restart: unless-stopped
+
+  # ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+  # Townhouse API — containerized host API (NEW in HS-mode v1)
+  #
+  # Owns /var/run/docker.sock (the only service that may). Provides:
+  #   - Fastify REST API for operator dashboard / CLI
+  #   - Calls connector admin API (/admin/hs-hostname, /admin/peers, etc.)
+  #   - Manages lifecycle for lazy-provisioned peer containers (Epic 46)
+  #
+  # Planning doc §4 anchor: "host-side townhouse-api owns dockerode and
+  # runs on the townhouse-hs-net so it can reach connector via Docker DNS".
+  # Port D21-008: Fastify host API on 127.0.0.1:28090.
+  # ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+  townhouse-api:
+    image: ghcr.io/toon-protocol/townhouse-api@sha256:48cb3df422019e252b7b1b5506b2fc666ea206ec57024eb68acbf781ebeb1f11
+    container_name: townhouse-hs-api
+    networks:
+      - townhouse-hs-net
+    depends_on:
+      connector:
+        condition: service_healthy
+    ports:
+      # Fastify host API — loopback only (NFR9).
+      - '127.0.0.1:28090:28090'
+    volumes:
+      # Docker socket — townhouse-api is the sole orchestration surface.
+      - /var/run/docker.sock:/var/run/docker.sock
+      # Operator home — wallet, config, compose files, snapshots (RW).
+      - ~/.townhouse:/.townhouse:rw
+    environment:
+      # Override entrypoint default '/config/config.yaml' so the API reads from
+      # the mounted operator-home dir (where Story 45.4 writes config.yaml).
+      TOWNHOUSE_CONFIG: /.townhouse/config.yaml
+      # Wallet decryption password — operator must export TOWNHOUSE_WALLET_PASSWORD
+      # in the shell that runs `docker compose up`. Compose interpolates the value
+      # at up time; the container exits immediately if it is unset (intended).
+      TOWNHOUSE_WALLET_PASSWORD: '${TOWNHOUSE_WALLET_PASSWORD:?TOWNHOUSE_WALLET_PASSWORD must be exported before docker compose up}'
+    healthcheck:
+      # nosemgrep: trailofbits.generic.wget-unencrypted-url.wget-unencrypted-url -- container-internal probe
+      test: ['CMD', 'wget', '-q', '--spider', 'http://localhost:28090/api/health']
+      interval: 10s
+      timeout: 5s
+      retries: 5
+      start_period: 15s
+    restart: unless-stopped
+
+  # ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+  # Town — Nostr relay node (profile: town)
+  # Lazy-provisioned via Epic 46: `townhouse node add town`
+  #
+  # SECURITY TODO (Epic 46): the per-node secrets below use `${VAR:-}` empty
+  # defaults, which silently start the container with a zero/empty key when
+  # the operator forgets to export the env var. Story 45.2 review (R2-MINOR)
+  # recommends switching to `${VAR:?msg}` (fail-fast) once Epic 46 boots
+  # these profiles — keeping the empty default for now lets `docker compose
+  # config` validation pass without injecting per-node secrets, matching
+  # Story 45.4's apex-only boot semantic (only connector + townhouse-api
+  # start at first run).
+  # ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+  town:
+    image: ghcr.io/toon-protocol/town@sha256:ba83fb6df536dec240f27fb7449db59e803207221c54e61ea019375ddc0461a0
+    container_name: townhouse-hs-town
+    profiles: [town]
+    networks:
+      - townhouse-hs-net
+    depends_on:
+      connector:
+        condition: service_healthy
+    expose: ['3000']
+    ports:
+      - '127.0.0.1:7100:7100'
+      - '127.0.0.1:3100:3100'
+    environment:
+      # nosemgrep: detect-insecure-websocket -- Docker-internal
+      CONNECTOR_URL: ws://connector:3000
+      ILP_ADDRESS: g.townhouse.town
+      NODE_ID: town
+      PARENT_PEER_ID: apex
+      FEE_PER_EVENT: '0'
+      # Chain RPC — operator sets EVM_RPC_URL in ~/.townhouse/env or via CLI.
+      TOON_RPC_URL: ${EVM_RPC_URL:-}
+      NODE_NOSTR_PUBKEY: ''
+      NODE_EVM_ADDRESS: ''
+      # Derived from HD wallet at runtime (Story 45.4 / Epic 46).
+      NODE_NOSTR_SECRET_KEY: '${TOWN_SECRET_KEY:-}'
+      SETTLEMENT_PRIVATE_KEY: '${TOWN_SETTLEMENT_PRIVATE_KEY:-}'
+      PARENT_EVM_ADDRESS: '${APEX_EVM_ADDRESS:-}'
+      TOON_CONNECTOR_LOG_LEVEL: '${TOON_CONNECTOR_LOG_LEVEL:-warn}'
+    volumes:
+      - townhouse-hs-town-data:/data
+    healthcheck:
+      test: ['CMD', 'wget', '-q', '--spider', 'http://localhost:3100/health']
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 10s
+    restart: unless-stopped
+
+  # ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+  # Mill — multi-chain swap node (profile: mill)
+  # Lazy-provisioned via Epic 46: `townhouse node add mill`
+  # ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+  mill:
+    image: ghcr.io/toon-protocol/mill@sha256:38e8c6460a3fc562dab28284b4f51958d8417ce10a7152bbb4224fc00cc42df5
+    container_name: townhouse-hs-mill
+    profiles: [mill]
+    networks:
+      - townhouse-hs-net
+    depends_on:
+      connector:
+        condition: service_healthy
+    expose: ['3000']
+    ports:
+      - '127.0.0.1:3200:3200'
+    environment:
+      # nosemgrep: detect-insecure-websocket -- Docker-internal
+      CONNECTOR_URL: ws://connector:3000
+      FEE_BASIS_POINTS: '0'
+      SETTLEMENT_RPC_URL: ${EVM_RPC_URL:-}
+      SETTLEMENT_CHAIN_ID: ${EVM_CHAIN_ID:-}
+      SETTLEMENT_TOKEN_ADDRESS: ${EVM_USDC_ADDRESS:-}
+      SOLANA_RPC_URL: ${SOLANA_RPC_URL:-}
+      SOLANA_USDC_MINT: ${SOLANA_USDC_MINT:-}
+      NODE_NOSTR_PUBKEY: ''
+      NODE_EVM_ADDRESS: ''
+      # Derived from HD wallet at runtime (Story 45.4 / Epic 46).
+      MILL_MNEMONIC: '${MILL_MNEMONIC:-}'
+      NODE_NOSTR_SECRET_KEY: '${MILL_SECRET_KEY:-}'
+      MILL_CONFIG_PATH: /config/mill.config.json
+      MILL_RELAYS: ${MILL_RELAYS:-}
+      SETTLEMENT_PRIVATE_KEY: '${MILL_SETTLEMENT_PRIVATE_KEY:-}'
+      PARENT_EVM_ADDRESS: '${APEX_EVM_ADDRESS:-}'
+      TOON_CONNECTOR_LOG_LEVEL: '${TOON_CONNECTOR_LOG_LEVEL:-warn}'
+    volumes:
+      # Operator-managed mill config (Epic 46 provisions this on `townhouse node add mill`).
+      - ~/.townhouse/mill.config.json:/config/mill.config.json:ro
+      - townhouse-hs-mill-data:/data
+    healthcheck:
+      test: ['CMD', 'wget', '-q', '--spider', 'http://localhost:3200/health']
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 15s
+    restart: unless-stopped
+
+  # ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+  # DVM — Arweave upload DVM (profile: dvm)
+  # Lazy-provisioned via Epic 46: `townhouse node add dvm`
+  # ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+  dvm:
+    image: ghcr.io/toon-protocol/dvm@sha256:26a2aff4cb490d11f8eab9cff3272475c951e7cc87378a1af6c702b529d74e10
+    container_name: townhouse-hs-dvm
+    profiles: [dvm]
+    networks:
+      - townhouse-hs-net
+    depends_on:
+      connector:
+        condition: service_healthy
+    expose: ['3300']
+    ports:
+      - '127.0.0.1:3400:3400'
+    environment:
+      # nosemgrep: detect-insecure-websocket -- Docker-internal
+      CONNECTOR_URL: ws://connector:3000
+      FEE_PER_JOB: '0'
+      DVM_KIND: '5094'
+      NODE_NOSTR_PUBKEY: ''
+      NODE_EVM_ADDRESS: ''
+      # Derived from HD wallet at runtime (Story 45.4 / Epic 46).
+      NODE_NOSTR_SECRET_KEY: '${DVM_SECRET_KEY:-}'
+      TURBO_TOKEN: ${TURBO_TOKEN:-}
+    volumes:
+      - townhouse-hs-dvm-data:/data
+    healthcheck:
+      test: ['CMD', 'wget', '-q', '--spider', 'http://localhost:3400/health']
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 10s
+    restart: unless-stopped

package/dist/demo-MJR47QHZ.js

@@ -0,0 +1,117 @@
+import { createRequire } from 'module'; const require = createRequire(import.meta.url);
+import {
+  DEFAULT_CONNECTOR_IMAGE
+} from "./chunk-UTFWPLTB.js";
+
+// src/presets/demo.ts
+import { join } from "path";
+import { homedir } from "os";
+import { readFileSync, existsSync } from "fs";
+import { resolve } from "path";
+var LOCAL_DEVNET_FALLBACK = {
+  anvilUrl: "http://localhost:28545",
+  solanaUrl: "http://localhost:28899"
+};
+var DEMO_DETERMINISTIC_PASSWORD = "townhouse-demo-INSECURE-do-not-use-in-prod";
+function resolveChainEndpoints(leasesPath) {
+  const localEvm = { rpcUrl: LOCAL_DEVNET_FALLBACK.anvilUrl };
+  const localSol = { rpcUrl: LOCAL_DEVNET_FALLBACK.solanaUrl };
+  if (!leasesPath || !existsSync(leasesPath)) {
+    return { source: "local-fallback", evm: localEvm, solana: localSol };
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(readFileSync(leasesPath, "utf-8"));
+  } catch {
+    return { source: "local-fallback", evm: localEvm, solana: localSol };
+  }
+  const evmUrl = typeof parsed.anvil?.url === "string" ? parsed.anvil.url : void 0;
+  const evmWs = typeof parsed.anvil?.ws_url === "string" ? parsed.anvil.ws_url : void 0;
+  const solUrl = typeof parsed.solana?.url === "string" ? parsed.solana.url : void 0;
+  const solWs = typeof parsed.solana?.ws_url === "string" ? parsed.solana.ws_url : void 0;
+  return {
+    source: leasesPath,
+    evm: evmUrl ? { rpcUrl: evmUrl, ...evmWs ? { wsUrl: evmWs } : {} } : localEvm,
+    solana: solUrl ? { rpcUrl: solUrl, ...solWs ? { wsUrl: solWs } : {} } : localSol
+  };
+}
+function defaultLeasesPath() {
+  return resolve(process.cwd(), "deploy", "akash", "leases.json");
+}
+function buildDemoConfig(options) {
+  const leasesPath = options.leasesPath === null ? void 0 : options.leasesPath ?? defaultLeasesPath();
+  const endpoints = resolveChainEndpoints(leasesPath);
+  return {
+    nodes: {
+      town: {
+        enabled: true,
+        feePerEvent: 0
+      },
+      mill: {
+        enabled: true,
+        feeBasisPoints: 0,
+        // Demo pair: EVM (Anvil) <-> Solana. The orchestrator does not
+        // currently consume mill.chains directly — it round-trips through
+        // YAML so the dashboard / future stories can read it.
+        chains: {
+          evm: {
+            rpcUrl: endpoints.evm.rpcUrl,
+            ...endpoints.evm.wsUrl ? { wsUrl: endpoints.evm.wsUrl } : {}
+          },
+          solana: {
+            rpcUrl: endpoints.solana.rpcUrl,
+            ...endpoints.solana.wsUrl ? { wsUrl: endpoints.solana.wsUrl } : {}
+          }
+        },
+        pairs: ["EVM<->SOL"]
+      },
+      dvm: {
+        enabled: true,
+        feePerJob: 0,
+        // Arweave DVM (kind:5094) — frictionless demo pricing. Operators
+        // running for real should raise this; entrypoint-dvm.ts treats the
+        // value as msats per byte uploaded to Arweave.
+        kindPricing: { "5094": 0 }
+      }
+    },
+    wallet: {
+      encrypted_path: options.walletPath
+    },
+    connector: {
+      image: DEFAULT_CONNECTOR_IMAGE,
+      adminPort: 9401
+    },
+    transport: {
+      // 'direct' for the demo because `townhouse up` doesn't bring up a
+      // SOCKS5 sidecar — ATOR mode would require one at `socks5://127.0.0.1:28050`
+      // (provided by the dev-infra stack but not the operator CLI). Switch
+      // to 'ator' once the sidecar story lands in townhouse `up`.
+      mode: "direct"
+    },
+    api: {
+      port: 9400,
+      host: "127.0.0.1"
+    },
+    logging: {
+      level: "info"
+    },
+    preset: {
+      name: "demo",
+      // Source recorded so operators can see at-a-glance whether their demo
+      // is hitting Akash or local devnets.
+      chainEndpointSource: endpoints.source
+    }
+  };
+}
+function defaultDemoConfigDir() {
+  return join(homedir(), ".townhouse");
+}
+export {
+  DEMO_DETERMINISTIC_PASSWORD,
+  LOCAL_DEVNET_FALLBACK,
+  buildDemoConfig,
+  defaultDemoConfigDir,
+  defaultLeasesPath,
+  resolveChainEndpoints
+};
+//# sourceMappingURL=demo-MJR47QHZ.js.map

package/dist/demo-MJR47QHZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/presets/demo.ts"],"sourcesContent":["/**\n * `--preset=demo` configuration (Story D2).\n *\n * Non-interactive preset for the TOON demo: 1 town, 1 mill (EVM<->SOL pair),\n * 1 dvm, ATOR transport ON, all fees zeroed (demo = free). Chain RPC URLs are\n * sourced from `deploy/akash/leases.json` if present, otherwise from local\n * devnet defaults documented in CLAUDE.md (Anvil 28545, Solana 28899).\n *\n * Future presets (test, prod) follow the same shape — see {@link PresetBuilder}.\n *\n * NOTE on schema reach: this preset writes mill chain endpoints into a\n * `chains` field on the mill node config. The orchestrator wiring that\n * forwards these into MILL_CONFIG_JSON is out of scope for D2 — for now the\n * field round-trips through the YAML so future stories (and the dashboard)\n * can read it without re-deriving it from leases.json.\n */\n\nimport { join } from 'node:path';\nimport { homedir } from 'node:os';\nimport { readFileSync, existsSync } from 'node:fs';\nimport { resolve } from 'node:path';\n\nimport type { TownhouseConfig } from '../config/schema.js';\nimport { DEFAULT_CONNECTOR_IMAGE } from '../constants.js';\n\n/**\n * Preset identifier — keep the union closed so we surface unknown presets at\n * the CLI boundary instead of silently falling through to defaults.\n */\nexport type PresetName = 'demo';\n\n/**\n * Local-devnet fallback URLs (CLAUDE.md \"Townhouse Dev Stack\" 28xxx range).\n * Used when `deploy/akash/leases.json` is absent or unreadable.\n */\nexport const LOCAL_DEVNET_FALLBACK = {\n  anvilUrl: 'http://localhost:28545',\n  solanaUrl: 'http://localhost:28899',\n} as const;\n\n/**\n * Deterministic-but-clearly-unsafe password used for the demo wallet when the\n * caller passes `--preset=demo --yes` without `--password`. The string\n * embeds the warning so it shows up in any log scrape; production callers\n * MUST supply their own `--password` (AC-D2-6).\n */\nexport const DEMO_DETERMINISTIC_PASSWORD =\n  'townhouse-demo-INSECURE-do-not-use-in-prod';\n\n/**\n * Shape of `deploy/akash/leases.json` that this preset cares about. The full\n * file emitted by `scripts/akash-deploy.sh` has more fields; we only need\n * RPC + WS URLs here, so the type is intentionally narrow + tolerant.\n */\nexport interface AkashLeases {\n  anvil?: {\n    url?: string;\n    host?: string;\n    port?: number | string;\n    ws_url?: string;\n  };\n  solana?: {\n    url?: string;\n    host?: string;\n    port?: number | string;\n    ws_host?: string;\n    ws_port?: number | string;\n    ws_url?: string;\n  };\n}\n\nexport interface ResolvedChainEndpoints {\n  /** Source of truth for traceability — either an absolute leases.json path or 'local-fallback'. */\n  source: string;\n  evm: { rpcUrl: string; wsUrl?: string };\n  solana: { rpcUrl: string; wsUrl?: string };\n}\n\n/**\n * Read `deploy/akash/leases.json` and extract chain endpoints, falling back\n * to local devnet URLs if the file is missing or any field is unusable.\n *\n * The fallback is per-chain: a leases.json that defines anvil but not solana\n * still gets the local Solana URL (and vice-versa). This keeps half-deployed\n * states usable.\n */\nexport function resolveChainEndpoints(\n  leasesPath?: string\n): ResolvedChainEndpoints {\n  const localEvm = { rpcUrl: LOCAL_DEVNET_FALLBACK.anvilUrl };\n  const localSol = { rpcUrl: LOCAL_DEVNET_FALLBACK.solanaUrl };\n\n  if (!leasesPath || !existsSync(leasesPath)) {\n    return { source: 'local-fallback', evm: localEvm, solana: localSol };\n  }\n\n  let parsed: AkashLeases;\n  try {\n    parsed = JSON.parse(readFileSync(leasesPath, 'utf-8')) as AkashLeases;\n  } catch {\n    // Malformed JSON — better to demo on local devnets than to error out at\n    // wizard-bypass time. Caller never blocks on bad leases data.\n    return { source: 'local-fallback', evm: localEvm, solana: localSol };\n  }\n\n  const evmUrl =\n    typeof parsed.anvil?.url === 'string' ? parsed.anvil.url : undefined;\n  const evmWs =\n    typeof parsed.anvil?.ws_url === 'string' ? parsed.anvil.ws_url : undefined;\n  const solUrl =\n    typeof parsed.solana?.url === 'string' ? parsed.solana.url : undefined;\n  const solWs =\n    typeof parsed.solana?.ws_url === 'string'\n      ? parsed.solana.ws_url\n      : undefined;\n\n  return {\n    source: leasesPath,\n    evm: evmUrl\n      ? { rpcUrl: evmUrl, ...(evmWs ? { wsUrl: evmWs } : {}) }\n      : localEvm,\n    solana: solUrl\n      ? { rpcUrl: solUrl, ...(solWs ? { wsUrl: solWs } : {}) }\n      : localSol,\n  };\n}\n\nexport interface BuildDemoConfigOptions {\n  /** Absolute path to the wallet file (typically `<configDir>/wallet.enc`). */\n  walletPath: string;\n  /**\n   * Absolute path to `deploy/akash/leases.json`. Defaults to\n   * `<repoRoot>/deploy/akash/leases.json` if not provided. Pass `null` to\n   * force local-devnet fallback (used in tests and when the file is known\n   * to not exist on the operator's machine).\n   */\n  leasesPath?: string | null;\n}\n\n/**\n * Default location of the Akash leases file. Resolved relative to CWD —\n * the demo CLI is run from anywhere, but the leases.json that matters lives\n * at `<repo>/deploy/akash/leases.json`.\n */\nexport function defaultLeasesPath(): string {\n  return resolve(process.cwd(), 'deploy', 'akash', 'leases.json');\n}\n\n/**\n * Build the full TownhouseConfig for `--preset=demo`.\n *\n * AC-D2-5 invariants enforced here:\n * - 1 town, 1 mill, 1 dvm (all enabled)\n * - feePerEvent = 0, feeBasisPoints = 0, feePerJob = 0\n * - transport.mode = 'ator'\n * - mill.chains contains exactly one EVM<->SOL pair\n */\nexport function buildDemoConfig(\n  options: BuildDemoConfigOptions\n): TownhouseConfig {\n  const leasesPath =\n    options.leasesPath === null\n      ? undefined\n      : (options.leasesPath ?? defaultLeasesPath());\n\n  const endpoints = resolveChainEndpoints(leasesPath);\n\n  return {\n    nodes: {\n      town: {\n        enabled: true,\n        feePerEvent: 0,\n      },\n      mill: {\n        enabled: true,\n        feeBasisPoints: 0,\n        // Demo pair: EVM (Anvil) <-> Solana. The orchestrator does not\n        // currently consume mill.chains directly — it round-trips through\n        // YAML so the dashboard / future stories can read it.\n        chains: {\n          evm: {\n            rpcUrl: endpoints.evm.rpcUrl,\n            ...(endpoints.evm.wsUrl ? { wsUrl: endpoints.evm.wsUrl } : {}),\n          },\n          solana: {\n            rpcUrl: endpoints.solana.rpcUrl,\n            ...(endpoints.solana.wsUrl\n              ? { wsUrl: endpoints.solana.wsUrl }\n              : {}),\n          },\n        },\n        pairs: ['EVM<->SOL'],\n      },\n      dvm: {\n        enabled: true,\n        feePerJob: 0,\n        // Arweave DVM (kind:5094) — frictionless demo pricing. Operators\n        // running for real should raise this; entrypoint-dvm.ts treats the\n        // value as msats per byte uploaded to Arweave.\n        kindPricing: { '5094': 0 },\n      },\n    },\n    wallet: {\n      encrypted_path: options.walletPath,\n    },\n    connector: {\n      image: DEFAULT_CONNECTOR_IMAGE,\n      adminPort: 9401,\n    },\n    transport: {\n      // 'direct' for the demo because `townhouse up` doesn't bring up a\n      // SOCKS5 sidecar — ATOR mode would require one at `socks5://127.0.0.1:28050`\n      // (provided by the dev-infra stack but not the operator CLI). Switch\n      // to 'ator' once the sidecar story lands in townhouse `up`.\n      mode: 'direct',\n    },\n    api: {\n      port: 9400,\n      host: '127.0.0.1',\n    },\n    logging: {\n      level: 'info',\n    },\n    preset: {\n      name: 'demo',\n      // Source recorded so operators can see at-a-glance whether their demo\n      // is hitting Akash or local devnets.\n      chainEndpointSource: endpoints.source,\n    },\n  };\n}\n\n/**\n * Default config dir used by the demo preset when `--config-dir` is omitted.\n * Mirrors the value in cli.ts; duplicated here so tests can construct the\n * same path without importing from the CLI surface.\n */\nexport function defaultDemoConfigDir(): string {\n  return join(homedir(), '.townhouse');\n}\n"],"mappings":";;;;;;AAiBA,SAAS,YAAY;AACrB,SAAS,eAAe;AACxB,SAAS,cAAc,kBAAkB;AACzC,SAAS,eAAe;AAejB,IAAM,wBAAwB;AAAA,EACnC,UAAU;AAAA,EACV,WAAW;AACb;AAQO,IAAM,8BACX;AAuCK,SAAS,sBACd,YACwB;AACxB,QAAM,WAAW,EAAE,QAAQ,sBAAsB,SAAS;AAC1D,QAAM,WAAW,EAAE,QAAQ,sBAAsB,UAAU;AAE3D,MAAI,CAAC,cAAc,CAAC,WAAW,UAAU,GAAG;AAC1C,WAAO,EAAE,QAAQ,kBAAkB,KAAK,UAAU,QAAQ,SAAS;AAAA,EACrE;AAEA,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,aAAa,YAAY,OAAO,CAAC;AAAA,EACvD,QAAQ;AAGN,WAAO,EAAE,QAAQ,kBAAkB,KAAK,UAAU,QAAQ,SAAS;AAAA,EACrE;AAEA,QAAM,SACJ,OAAO,OAAO,OAAO,QAAQ,WAAW,OAAO,MAAM,MAAM;AAC7D,QAAM,QACJ,OAAO,OAAO,OAAO,WAAW,WAAW,OAAO,MAAM,SAAS;AACnE,QAAM,SACJ,OAAO,OAAO,QAAQ,QAAQ,WAAW,OAAO,OAAO,MAAM;AAC/D,QAAM,QACJ,OAAO,OAAO,QAAQ,WAAW,WAC7B,OAAO,OAAO,SACd;AAEN,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,KAAK,SACD,EAAE,QAAQ,QAAQ,GAAI,QAAQ,EAAE,OAAO,MAAM,IAAI,CAAC,EAAG,IACrD;AAAA,IACJ,QAAQ,SACJ,EAAE,QAAQ,QAAQ,GAAI,QAAQ,EAAE,OAAO,MAAM,IAAI,CAAC,EAAG,IACrD;AAAA,EACN;AACF;AAmBO,SAAS,oBAA4B;AAC1C,SAAO,QAAQ,QAAQ,IAAI,GAAG,UAAU,SAAS,aAAa;AAChE;AAWO,SAAS,gBACd,SACiB;AACjB,QAAM,aACJ,QAAQ,eAAe,OACnB,SACC,QAAQ,cAAc,kBAAkB;AAE/C,QAAM,YAAY,sBAAsB,UAAU;AAElD,SAAO;AAAA,IACL,OAAO;AAAA,MACL,MAAM;AAAA,QACJ,SAAS;AAAA,QACT,aAAa;AAAA,MACf;AAAA,MACA,MAAM;AAAA,QACJ,SAAS;AAAA,QACT,gBAAgB;AAAA;AAAA;AAAA;AAAA,QAIhB,QAAQ;AAAA,UACN,KAAK;AAAA,YACH,QAAQ,UAAU,IAAI;AAAA,YACtB,GAAI,UAAU,IAAI,QAAQ,EAAE,OAAO,UAAU,IAAI,MAAM,IAAI,CAAC;AAAA,UAC9D;AAAA,UACA,QAAQ;AAAA,YACN,QAAQ,UAAU,OAAO;AAAA,YACzB,GAAI,UAAU,OAAO,QACjB,EAAE,OAAO,UAAU,OAAO,MAAM,IAChC,CAAC;AAAA,UACP;AAAA,QACF;AAAA,QACA,OAAO,CAAC,WAAW;AAAA,MACrB;AAAA,MACA,KAAK;AAAA,QACH,SAAS;AAAA,QACT,WAAW;AAAA;AAAA;AAAA;AAAA,QAIX,aAAa,EAAE,QAAQ,EAAE;AAAA,MAC3B;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,gBAAgB,QAAQ;AAAA,IAC1B;AAAA,IACA,WAAW;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,IACb;AAAA,IACA,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA,MAKT,MAAM;AAAA,IACR;AAAA,IACA,KAAK;AAAA,MACH,MAAM;AAAA,MACN,MAAM;AAAA,IACR;AAAA,IACA,SAAS;AAAA,MACP,OAAO;AAAA,IACT;AAAA,IACA,QAAQ;AAAA,MACN,MAAM;AAAA;AAAA;AAAA,MAGN,qBAAqB,UAAU;AAAA,IACjC;AAAA,EACF;AACF;AAOO,SAAS,uBAA+B;AAC7C,SAAO,KAAK,QAAQ,GAAG,YAAY;AACrC;","names":[]}

package/dist/image-manifest.json

@@ -0,0 +1,32 @@
+{
+  "schemaVersion": 1,
+  "townhouseVersion": "0.1.0-rc5",
+  "builtAt": "2026-05-10T00:04:39.745Z",
+  "images": {
+    "townhouse-api": {
+      "name": "ghcr.io/toon-protocol/townhouse-api",
+      "tag": "0.1.0-rc5",
+      "digest": "sha256:48cb3df422019e252b7b1b5506b2fc666ea206ec57024eb68acbf781ebeb1f11"
+    },
+    "town": {
+      "name": "ghcr.io/toon-protocol/town",
+      "tag": "0.1.0-rc5",
+      "digest": "sha256:ba83fb6df536dec240f27fb7449db59e803207221c54e61ea019375ddc0461a0"
+    },
+    "mill": {
+      "name": "ghcr.io/toon-protocol/mill",
+      "tag": "0.1.0-rc5",
+      "digest": "sha256:38e8c6460a3fc562dab28284b4f51958d8417ce10a7152bbb4224fc00cc42df5"
+    },
+    "dvm": {
+      "name": "ghcr.io/toon-protocol/dvm",
+      "tag": "0.1.0-rc5",
+      "digest": "sha256:26a2aff4cb490d11f8eab9cff3272475c951e7cc87378a1af6c702b529d74e10"
+    },
+    "connector": {
+      "name": "ghcr.io/toon-protocol/connector",
+      "tag": "3.4.1",
+      "digest": "sha256:4a24ccb0997d7b025997e670546032f6a84cd18a77c490509016b85e181a344e"
+    }
+  }
+}