@toon-protocol/townhouse 0.7.0 → 0.9.0

package/dist/compose/townhouse-dev.yml

@@ -48,7 +48,7 @@ services:
   # ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
   townhouse-dev-connector:
     # Image tag must match DEFAULT_CONNECTOR_IMAGE in packages/townhouse/src/constants.ts
-    image: ghcr.io/toon-protocol/connector:3.8.1
+    image: ghcr.io/toon-protocol/connector:3.9.0
     container_name: townhouse-dev-connector
     networks:
       - townhouse-dev-net

package/dist/compose/townhouse-hs.yml

@@ -22,11 +22,11 @@
 #     Story 45.4 boots only connector + townhouse-api at apex install
 #
 # Digest placeholders (substituted at build time from dist/image-manifest.json):
-#   @sha256:6e72054b2c1b98e0e2444cdb7b42ae75e606e692f057c0ebc32ac45888e65e22 → @sha256:<hex>
-#   @sha256:11d9e6a655ac8e8bbe5c98c8a2fe98a43997c8f8ee58c92ff69cd93bc02f59a8         → @sha256:<hex>
-#   @sha256:eeab929af6d474cde60c5ae2b548de005fee63ef6735e0dd97d518c6b9419d54         → @sha256:<hex>
-#   @sha256:1b0e75d1163f266d82e2cd0984b887022bc68fa43a197aec4182d674f333afa9          → @sha256:<hex>
-#   @sha256:d22a786f82cc928238b0ef14c6455d1238bd2f42744138cad8af81ca1747ff6e    → @sha256:<hex>
+#   @sha256:453279fcd09f71559c908d6932d341eeb0b6d1aae864e8b735e824218e34aba7 → @sha256:<hex>
+#   @sha256:ef715c6e9ae15a2c0e1a824c26631bd171597e15fbf18e0dfe20556f5350d451         → @sha256:<hex>
+#   @sha256:2f2b38ffad9470eaefb0f58848d754dd9d86a141dc76a25c8d70c3c50586b680         → @sha256:<hex>
+#   @sha256:65eb6eaf2a6620cfe4c07062f291e5c9be40e4ab5d1a5df1451e627baa8167eb          → @sha256:<hex>
+#   @sha256:673a49e30a5b9ae3968fe7ef5ca99b6ceca21bb69996bda68cd18ec335b874fe    → @sha256:<hex>
 #
 # Scope guard (Story 45.2 does NOT include):
 #   - ator-sidecar / ator-sidecar-relay (connector v3.5.x does HS publishing in-process)
@@ -106,7 +106,7 @@ services:
       - townhouse-hs-net
 
   connector:
-    image: ghcr.io/toon-protocol/connector@sha256:d22a786f82cc928238b0ef14c6455d1238bd2f42744138cad8af81ca1747ff6e
+    image: ghcr.io/toon-protocol/connector@sha256:673a49e30a5b9ae3968fe7ef5ca99b6ceca21bb69996bda68cd18ec335b874fe
     # v3.5.1 has the multi-arch manifest but the default resolves to arm64 on
     # some Docker versions. Pin to amd64 explicitly until the manifest is fixed.
     platform: linux/amd64
@@ -157,7 +157,7 @@ services:
   # Port D21-008: Fastify host API on 127.0.0.1:28090.
   # ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
   townhouse-api:
-    image: ghcr.io/toon-protocol/townhouse-api@sha256:6e72054b2c1b98e0e2444cdb7b42ae75e606e692f057c0ebc32ac45888e65e22
+    image: ghcr.io/toon-protocol/townhouse-api@sha256:453279fcd09f71559c908d6932d341eeb0b6d1aae864e8b735e824218e34aba7
     container_name: townhouse-hs-api
     # Run as the operator's host UID so bind-mounted ~/.townhouse files
     # (rw------- 600) are readable. TOWNHOUSE_UID is injected by `townhouse hs up`.
@@ -264,7 +264,7 @@ services:
   # start at first run).
   # ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
   town:
-    image: ghcr.io/toon-protocol/town@sha256:11d9e6a655ac8e8bbe5c98c8a2fe98a43997c8f8ee58c92ff69cd93bc02f59a8
+    image: ghcr.io/toon-protocol/town@sha256:ef715c6e9ae15a2c0e1a824c26631bd171597e15fbf18e0dfe20556f5350d451
     container_name: townhouse-hs-town
     profiles: [town]
     networks:
@@ -330,7 +330,7 @@ services:
   # Lazy-provisioned via Epic 46: `townhouse node add mill`
   # ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
   mill:
-    image: ghcr.io/toon-protocol/mill@sha256:eeab929af6d474cde60c5ae2b548de005fee63ef6735e0dd97d518c6b9419d54
+    image: ghcr.io/toon-protocol/mill@sha256:2f2b38ffad9470eaefb0f58848d754dd9d86a141dc76a25c8d70c3c50586b680
     container_name: townhouse-hs-mill
     profiles: [mill]
     networks:
@@ -388,7 +388,7 @@ services:
   # Lazy-provisioned via Epic 46: `townhouse node add dvm`
   # ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
   dvm:
-    image: ghcr.io/toon-protocol/dvm@sha256:1b0e75d1163f266d82e2cd0984b887022bc68fa43a197aec4182d674f333afa9
+    image: ghcr.io/toon-protocol/dvm@sha256:65eb6eaf2a6620cfe4c07062f291e5c9be40e4ab5d1a5df1451e627baa8167eb
     container_name: townhouse-hs-dvm
     profiles: [dvm]
     networks:

package/dist/{demo-4ZF3RRNH.js → demo-COZ7SB5F.js}

@@ -1,7 +1,7 @@
 import { createRequire } from 'module'; const require = createRequire(import.meta.url);
 import {
   DEFAULT_CONNECTOR_IMAGE
-} from "./chunk-NZR5C3KD.js";
+} from "./chunk-BLNEL3QS.js";
 import "./chunk-I2R4CRUX.js";
 
 // src/presets/demo.ts
@@ -115,4 +115,4 @@ export {
   defaultLeasesPath,
   resolveChainEndpoints
 };
-//# sourceMappingURL=demo-4ZF3RRNH.js.map
+//# sourceMappingURL=demo-COZ7SB5F.js.map

package/dist/image-manifest.json

@@ -1,32 +1,32 @@
 {
   "schemaVersion": 1,
-  "townhouseVersion": "0.7.0",
-  "builtAt": "2026-06-03T22:04:17.852Z",
+  "townhouseVersion": "0.9.0",
+  "builtAt": "2026-06-04T16:27:27.323Z",
   "images": {
     "townhouse-api": {
       "name": "ghcr.io/toon-protocol/townhouse-api",
-      "tag": "0.7.0",
-      "digest": "sha256:6e72054b2c1b98e0e2444cdb7b42ae75e606e692f057c0ebc32ac45888e65e22"
+      "tag": "0.9.0",
+      "digest": "sha256:453279fcd09f71559c908d6932d341eeb0b6d1aae864e8b735e824218e34aba7"
     },
     "town": {
       "name": "ghcr.io/toon-protocol/town",
-      "tag": "0.7.0",
-      "digest": "sha256:11d9e6a655ac8e8bbe5c98c8a2fe98a43997c8f8ee58c92ff69cd93bc02f59a8"
+      "tag": "0.9.0",
+      "digest": "sha256:ef715c6e9ae15a2c0e1a824c26631bd171597e15fbf18e0dfe20556f5350d451"
     },
     "mill": {
       "name": "ghcr.io/toon-protocol/mill",
-      "tag": "0.7.0",
-      "digest": "sha256:eeab929af6d474cde60c5ae2b548de005fee63ef6735e0dd97d518c6b9419d54"
+      "tag": "0.9.0",
+      "digest": "sha256:2f2b38ffad9470eaefb0f58848d754dd9d86a141dc76a25c8d70c3c50586b680"
     },
     "dvm": {
       "name": "ghcr.io/toon-protocol/dvm",
-      "tag": "0.7.0",
-      "digest": "sha256:1b0e75d1163f266d82e2cd0984b887022bc68fa43a197aec4182d674f333afa9"
+      "tag": "0.9.0",
+      "digest": "sha256:65eb6eaf2a6620cfe4c07062f291e5c9be40e4ab5d1a5df1451e627baa8167eb"
     },
     "connector": {
       "name": "ghcr.io/toon-protocol/connector",
-      "tag": "3.8.1",
-      "digest": "sha256:d22a786f82cc928238b0ef14c6455d1238bd2f42744138cad8af81ca1747ff6e"
+      "tag": "3.9.0",
+      "digest": "sha256:673a49e30a5b9ae3968fe7ef5ca99b6ceca21bb69996bda68cd18ec335b874fe"
     }
   }
 }

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { E as EncryptedWallet, T as TownhouseConfig, W as WalletManager, a as ComposeProfile, N as NodeType$1, B as BandwidthStats, H as HealthCheckOptions, b as ChainProviderEntry } from './manager-DSkD9Td1.js';
-export { A as ApiConfig, c as ChainType, d as ComposeLoaderError, C as ComposeLoaderOptions, e as ConnectorConfig, f as ContainerSpec, D as DerivedNodeKeys, g as DvmNodeConfig, h as EvmChainProvider, L as LoggingConfig, M as MillNodeConfig, i as MinaChainProvider, j as NodeKeyInfo, k as NodeKeys, l as NodesConfig, O as OrchestratorEvents, S as SolanaChainProvider, m as TownNodeConfig, n as TransportConfig, o as WalletConfig, p as WalletManagerConfig, q as WalletState, r as loadComposeTemplate, s as materializeComposeTemplate } from './manager-DSkD9Td1.js';
+import { E as EncryptedWallet, T as TownhouseConfig, W as WalletManager, a as ComposeProfile, N as NodeType$1, B as BandwidthStats, H as HealthCheckOptions, b as ChainProviderEntry } from './manager-BzalncRW.js';
+export { A as ApiConfig, c as ChainType, d as ComposeLoaderError, C as ComposeLoaderOptions, e as ConnectorConfig, f as ContainerSpec, D as DerivedNodeKeys, g as DvmNodeConfig, h as EvmChainProvider, L as LoggingConfig, M as MillNodeConfig, i as MinaChainProvider, j as NodeKeyInfo, k as NodeKeys, l as NodesConfig, O as OrchestratorEvents, S as SolanaChainProvider, m as TownNodeConfig, n as TransportConfig, o as WalletConfig, p as WalletManagerConfig, q as WalletState, r as loadComposeTemplate, s as materializeComposeTemplate } from './manager-BzalncRW.js';
 import { EventEmitter } from 'node:events';
 import Docker from 'dockerode';
 import { FastifyBaseLogger, FastifyInstance } from 'fastify';

package/dist/index.js

@@ -34,9 +34,9 @@ import {
   utcYearBoundary,
   validateConfig,
   writeNodesYaml
-} from "./chunk-ZUMMJFGH.js";
+} from "./chunk-UBFITLPQ.js";
 import "./chunk-5O4SBV5O.js";
-import "./chunk-NZR5C3KD.js";
+import "./chunk-BLNEL3QS.js";
 import "./chunk-I2R4CRUX.js";
 export {
   BootReconciler,

package/dist/{manager-DSkD9Td1.d.ts → manager-BzalncRW.d.ts}

@@ -88,8 +88,13 @@ interface EvmChainProvider {
     registryAddress: string;
     /** Settlement token (USDC, etc.) contract. */
     tokenAddress: string;
-    /** Hex private key / key id the connector signs settlement claims with. */
-    keyId: string;
+    /**
+     * Hex private key / key id the connector signs settlement claims with.
+     * Optional: when omitted, `townhouse hs up` fills it with the operator's
+     * mnemonic-derived apex settlement key (acct index 3). Set it only to use an
+     * external/hardware key.
+     */
+    keyId?: string;
 }
 /** Solana settlement chain. */
 interface SolanaChainProvider {
@@ -104,8 +109,11 @@ interface SolanaChainProvider {
     programId: string;
     /** Settlement token mint (base58). */
     tokenMint?: string;
-    /** Key id the connector signs settlement claims with. */
-    keyId: string;
+    /**
+     * Key id the connector signs settlement claims with. Optional — when omitted,
+     * `townhouse hs up` fills it with the operator's mnemonic-derived apex key.
+     */
+    keyId?: string;
 }
 /** Mina settlement chain. */
 interface MinaChainProvider {
@@ -537,6 +545,31 @@ declare class WalletManager {
      * still owned by WalletManager and will be zeroed by `lock()`.
      */
     getEvmPrivateKeyHex(nodeType: NodeType): string;
+    /**
+     * Derive the APEX (connector) settlement key from the operator mnemonic at
+     * ACCOUNT_INDEX_APEX. The apex signs settlement claims with this key, so the
+     * operator never has to supply a raw `keyId` to `townhouse chains add`.
+     *
+     * Returns the EVM private key as a `0x`-prefixed 64-char hex string — the
+     * form the connector config's `keyId` expects (matches the dev placeholder
+     * `0x7c85…`). Also returns Solana + Mina settlement keys (connector 3.9.0)
+     * derived at the same `ACCOUNT_INDEX_APEX`, in the RAW base58 form the
+     * connector resolves a non-EVM `keyId` as:
+     *   - Solana: base58 of the 32-byte Ed25519 seed,
+     *   - Mina:   `EK…` base58check (via `hexToMinaBase58PrivateKey`).
+     *
+     * EVM derivation must always succeed (it throws on failure). Solana/Mina
+     * derivation is best-effort: if `deriveMillKeys` throws (unsupported
+     * platform, library load error) the corresponding key is OMITTED rather than
+     * failing the whole method, so the EVM keyId path is never blocked.
+     *
+     * Async because `deriveMillKeys` is async. Throws when the wallet is locked.
+     */
+    getApexSettlementKeys(): Promise<{
+        evmPrivateKeyHex: string;
+        solanaPrivateKeyBase58?: string;
+        minaPrivateKeyBase58?: string;
+    }>;
     /**
      * Returns the Solana Ed25519 private key seed for a node as a 64-char
      * lowercase hex string (32 raw seed bytes). Throws when the wallet is

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@toon-protocol/townhouse",
-  "version": "0.7.0",
+  "version": "0.9.0",
   "description": "TOON Townhouse — host-native orchestrator + dashboard for Docker-containerized TOON nodes",
   "type": "module",
   "main": "./dist/index.js",

package/dist/chunk-NZR5C3KD.js

@@ -1,44 +0,0 @@
-import { createRequire } from 'module'; const require = createRequire(import.meta.url);
-
-// src/constants.ts
-var CONTAINER_PREFIX = "townhouse-";
-var NODE_BTP_PORT = 3e3;
-var DEFAULT_CONNECTOR_IMAGE = (
-  // v3.8.1 — latest published connector (Mina settlement fix). Wires the
-  // dual-party Mina payment-channel claim path (toon-protocol/connector#84 —
-  // the on-chain `claimFromChannel` now passes the real counterparty balance,
-  // salt, and both signatures instead of the single-sig/zeroed placeholders
-  // that left Mina settlement un-claimable). EVM and Solana settlement are
-  // unchanged. Patch over 3.8.0, which migrated local SQLite from
-  // better-sqlite3 to libsql (toon-protocol/connector#79 — removed the
-  // native-build failure on Node 24 that left the settlement/claim subsystem
-  // silently un-wired → value-bearing packets auto-fulfilled instead of
-  // claim-gated) AND made inbound per-packet claim validation relation-aware
-  // (toon-protocol/connector#78 — a child node skips the inline-claim
-  // requirement for PREPAREs forwarded from its parent, unblocking Story 50.3's
-  // AC#1 kind:1 F06 "No payment channel claim attached" on the apex→child hop).
-  // No breaking changes to the SDK/admin contract within 3.x (verified >=3.3.2
-  // through 3.8.1 — see packages/sdk/CONNECTOR_MIGRATION.md). Digest resolved via
-  // `docker buildx imagetools inspect` for tag 3.8.1. To bump: see
-  // CONNECTOR_RELEASE_CONTRACT.md.
-  "ghcr.io/toon-protocol/connector@sha256:d22a786f82cc928238b0ef14c6455d1238bd2f42744138cad8af81ca1747ff6e"
-);
-var ACCOUNT_INDEX_TOWN = 0;
-var ACCOUNT_INDEX_MILL = 1;
-var ACCOUNT_INDEX_DVM = 2;
-var TOWN_HEALTH_PORT = 3100;
-var MILL_HEALTH_PORT = 3200;
-var DVM_HEALTH_PORT = 3400;
-
-export {
-  CONTAINER_PREFIX,
-  NODE_BTP_PORT,
-  DEFAULT_CONNECTOR_IMAGE,
-  ACCOUNT_INDEX_TOWN,
-  ACCOUNT_INDEX_MILL,
-  ACCOUNT_INDEX_DVM,
-  TOWN_HEALTH_PORT,
-  MILL_HEALTH_PORT,
-  DVM_HEALTH_PORT
-};
-//# sourceMappingURL=chunk-NZR5C3KD.js.map

package/dist/chunk-NZR5C3KD.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/constants.ts"],"sourcesContent":["/**\n * Shared constants for Townhouse package.\n *\n * Single source of truth for values used across multiple modules\n * (orchestrator, config-generator, CLI).\n */\n\n/** Container name prefix for all Townhouse-managed Docker containers */\nexport const CONTAINER_PREFIX = 'townhouse-';\n\n/** Internal BTP port exposed by node containers (Docker-internal only) */\nexport const NODE_BTP_PORT = 3000;\n\n/**\n * Default connector Docker image — digest-pinned per CONNECTOR_RELEASE_CONTRACT.md.\n *\n * To bump: capture a new digest by running the Story 45.1 publish workflow\n * against the desired connector tag, copy the resulting image-manifest.json\n * connector entry's digest, and update this constant + the contract canary\n * fixture. See packages/sdk/CONNECTOR_RELEASE_CONTRACT.md for the full bump\n * checklist + breaking-changes history.\n *\n * To read the human-readable tag for log output, consult dist/image-manifest.json:\n *   manifest.images.connector.tag\n */\nexport const DEFAULT_CONNECTOR_IMAGE =\n  // v3.8.1 — latest published connector (Mina settlement fix). Wires the\n  // dual-party Mina payment-channel claim path (toon-protocol/connector#84 —\n  // the on-chain `claimFromChannel` now passes the real counterparty balance,\n  // salt, and both signatures instead of the single-sig/zeroed placeholders\n  // that left Mina settlement un-claimable). EVM and Solana settlement are\n  // unchanged. Patch over 3.8.0, which migrated local SQLite from\n  // better-sqlite3 to libsql (toon-protocol/connector#79 — removed the\n  // native-build failure on Node 24 that left the settlement/claim subsystem\n  // silently un-wired → value-bearing packets auto-fulfilled instead of\n  // claim-gated) AND made inbound per-packet claim validation relation-aware\n  // (toon-protocol/connector#78 — a child node skips the inline-claim\n  // requirement for PREPAREs forwarded from its parent, unblocking Story 50.3's\n  // AC#1 kind:1 F06 \"No payment channel claim attached\" on the apex→child hop).\n  // No breaking changes to the SDK/admin contract within 3.x (verified >=3.3.2\n  // through 3.8.1 — see packages/sdk/CONNECTOR_MIGRATION.md). Digest resolved via\n  // `docker buildx imagetools inspect` for tag 3.8.1. To bump: see\n  // CONNECTOR_RELEASE_CONTRACT.md.\n  'ghcr.io/toon-protocol/connector@sha256:d22a786f82cc928238b0ef14c6455d1238bd2f42744138cad8af81ca1747ff6e';\n\n/**\n * HD wallet account indices per node type (Story 21.4, D21-008).\n * BIP-44 paths: m/44'/{coin}'/ACCOUNT'/0/0\n */\nexport const ACCOUNT_INDEX_TOWN = 0;\nexport const ACCOUNT_INDEX_MILL = 1;\nexport const ACCOUNT_INDEX_DVM = 2;\n\n/** BLS health port exposed by each node container type (internal Docker port). */\nexport const TOWN_HEALTH_PORT = 3100;\nexport const MILL_HEALTH_PORT = 3200;\nexport const DVM_HEALTH_PORT = 3400;\n"],"mappings":";;;AAQO,IAAM,mBAAmB;AAGzB,IAAM,gBAAgB;AActB,IAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkBX;AAAA;AAMK,IAAM,qBAAqB;AAC3B,IAAM,qBAAqB;AAC3B,IAAM,oBAAoB;AAG1B,IAAM,mBAAmB;AACzB,IAAM,mBAAmB;AACzB,IAAM,kBAAkB;","names":[]}