chore: close three open items — credential forwarding, minter removal, seed infra

1. Credential forwarding (Options A+B closed):
   Gap was already wired — CredentialDecryptor.extract/2 → dispatch →
   Invoker.invoke(extra_env) → subprocess env vars. Documented in STATE.a2ml.
   Option C (RGTV broker) remains future work.

2. Retire tools/cartridge-minter/ (Node.js, banned language):
   Deleted 10 files (Node.js + Rust sources). Updated references in:
   Justfile (Cargo check → launch-scaffolder), QUICKSTART-USER.adoc,
   llm-warmup-dev.md, llm-warmup-user.md. canonical tool is launch-scaffolder.

3. Seed node deployment infrastructure:
   - container/compose.prod.yaml: production Podman Compose using ghcr.io
     image; all 4 continental seed peers pre-configured; security hardened
     (read-only fs, no-new-privileges, tmpfs).
   - QUICKSTART-USER.adoc: added "Running a Production Node" section with
     podman-compose and Quadlet instructions.
   - container-publish.yml: fix stale label "99 → 112 cartridges".

173 ExUnit tests, 0 failures.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/container-publish.yml

@@ -64,7 +64,7 @@ jobs:
             --tag "${{ steps.meta.outputs.image }}:${{ steps.meta.outputs.version }}" \
             --tag "${{ steps.meta.outputs.image }}:latest" \
             --label "org.opencontainers.image.source=${{ github.server_url }}/${{ github.repository }}" \
-            --label "org.opencontainers.image.description=Bundle of Joy MCP Server — 99 formally verified cartridges" \
+            --label "org.opencontainers.image.description=Bundle of Joy MCP Server — 112 cartridges (111 Zig FFI + 1 JS)" \
             --label "org.opencontainers.image.licenses=PMPL-1.0-or-later" \
             --label "org.opencontainers.image.version=${{ steps.meta.outputs.version }}" \
             .

.machine_readable/6a2/STATE.a2ml

@@ -53,8 +53,9 @@ v-lang-files                = 0     # all .v files removed 2026-04-12
 [open-gaps]
 # Ordered by impact on users hitting POST /cartridge/:name/invoke
 gap-1 = "PARTIALLY CLOSED 2026-04-25 — X-Trust-Level enforcement implemented (BojRest.TrustPolicy); keyed cartridges require authenticated/internal trust from non-loopback callers. Credential forwarding (Options A/B/C) still undecided."
-gap-2 = "Credential forwarding in federation — user API keys live on their node, not on volunteer nodes"
+gap-2 = "CLOSED for Options A+B 2026-04-25 — Option A (caller-supplied encrypted creds in request body) wired: CredentialDecryptor.extract/2 → dispatch → Invoker extra_env → subprocess env vars. Option B (node-level env vars) inherits from server process. Option C (RGTV broker) remains future work."
 gap-3 = "Load-aware inter-node routing not wired — invocations are local only"
+gap-5 = "Seed nodes not yet deployed — DNS records and actual infrastructure not provisioned; compose.prod.yaml and boj-community-node.container ready 2026-04-25"
 gap-4 = "CLOSED 2026-04-25 — Test coverage reached CRG C (165 tests: 10 properties + 155 regular, 0 failures)"
 
 [critical-next-actions]
@@ -72,6 +73,7 @@ test-coverage = "CLOSED 2026-04-25 — 165 ExUnit tests; CRG C met"
 
 [session-history]
 entries = [
+  { date = "2026-04-25", description = "Items 1+2+3 session: (1) Credential forwarding gaps A+B closed — chain fully wired (CredentialDecryptor → dispatch → Invoker extra_env → subprocess env vars). Option C (RGTV) future work. (2) tools/cartridge-minter/ DELETED — Node.js banned artefact. Justfile, QUICKSTART-USER.adoc, llm-warmup-dev.md, llm-warmup-user.md updated to reference launch-scaffolder. (3) Seed node infra: compose.prod.yaml created (production Podman Compose using ghcr.io image, all 4 seed peers pre-wired); QUICKSTART-USER.adoc seed node section added; container-publish.yml label updated 99→112 cartridges. container/boj-community-node.container + seed-nodes.toml already existed." },
   { date = "2026-04-25", description = "Phase 9 auth (partial): (1) BojRest.TrustPolicy — maps auth.method→exposure (:public/:authenticated), checks X-Trust-Level header; loopback bypass. (2) Router wired: X-Trust-Level enforcement in invoke handler; X-Node-Identity audit logging. (3) trust_policy_test.exs (11 tests); 7 new router auth tests. (4) Justfile test/test-verbose rewritten as loops (111 cartridges, was hardcoded 17). Total: 173 ExUnit tests, 0 failures." },
   { date = "2026-04-25", description = "FFI wiring complete — all 111 cartridges now have compiled .so + ffi key in cartridge.json. Scaffolded 12 remaining cartridges (6 with existing stub Zig source replaced with clean ADR-0006 impl: academic-workflow-mcp, bofig-mcp, ephapax-mcp, fireflag-mcp, hesiod-mcp, sanctify-mcp; 6 written from scratch: claude-agents-power-mcp, coderag-mcp, local-memory-mcp, notifyhub-mcp, opendatamcp, origenemcp). Each: *_ffi.zig (5-symbol ADR-0006 ABI + tool stubs) + build.zig + cartridge_shim.zig + canonical ffi block in cartridge.json with so_path=ffi/zig-out/lib/lib<module>.so. All 12 build clean, all 12 pass boj-invoke probe. 165 Elixir tests still 0 failures." },
   { date = "2026-04-25", description = "CRG D→C test expansion: (1) Added invoker_test.exs (15 tests — cli_path resolution, exit-code classification via fake_boj_invoke fixture, successful probe/name/version/invoke, extra_env). (2) Added js_worker_pool_test.exs (9 tests — pool_size, consistent-hash routing, fallback, E2E). (3) Added catalog_properties_test.exs (10 StreamData properties — round-trips, structural invariants, CredentialDecryptor properties). (4) Added contract_test.exs (15 contract tests — Catalog↔Router, NodeKey↔CredentialDecryptor, Router↔Invoker dispatch). (5) Added aspect_test.exs (15 aspect tests — no-crash, content-type, security, idempotency). (6) Added benchmarks/boj_bench.exs (10 Benchee scenarios). (7) Extended catalog_test.exs + router_test.exs + node_key_test.exs + credential_decryptor_test.exs + js_invoker_test.exs with 80+ additional tests. (8) Fixed bofig-mcp, hesiod-mcp, academic-workflow-mcp cartridge.json (missing spdx/domain/tier/auth/so_path fields). Total: 165 tests (10 properties + 155 regular), 0 failures. Grade D→C achieved." },

Justfile

@@ -1105,7 +1105,7 @@ doctor:
     echo ""
     echo "Optional tools:"
     check_optional "V (vlang)"    v            "deprecated/banned 2026-04-10"
-    check_optional "Cargo"        cargo        "needed for tools/cartridge-minter"
+    check_optional "Cargo"        cargo        "needed by launch-scaffolder (mint/provision/config)"
     check_optional "cloudflared"  cloudflared  "needed for tunnel"
     check_optional "panic-attack" panic-attack "pre-commit scanner"
     check_optional "podman"       podman       "container builds"

QUICKSTART-USER.adoc

@@ -34,7 +34,7 @@ Three-class architecture: Class 1 (simple CLI), Class 2 (orchestrator with webho
 
 | Rust / Cargo (optional)
 | >= 1.80
-| For `tools/cartridge-minter` only
+| For `launch-scaffolder` (mint/provision/config cartridges)
 |===
 
 Verify all tools:
@@ -177,10 +177,36 @@ elixir/                Elixir/BEAM REST server (Catalog, Router, JsWorkerPool)
 cartridges/            One dir per cartridge (112 total)
   database-mcp/        Example: Idris2 ABI + Zig FFI + mod.js adapter
 container/             Stapeln container ecosystem
-tools/cartridge-minter Rust CLI for minting new cartridges
+tools/                 Cartridge tooling (provisioner, configurator, harness)
 .machine_readable/     State, policies, contractiles
 ----
 
+== Running a Production Node (Umoja Federation)
+
+To run a community node that joins the Umoja seed network:
+
+[source,bash]
+----
+# Pull the latest image
+podman-compose -f container/compose.prod.yaml pull
+
+# Start (daemonised)
+podman-compose -f container/compose.prod.yaml up -d
+
+# Check it is live
+curl http://localhost:7700/health
+----
+
+The four continental seed nodes (`eu`, `de`, `us`, `ap` at `boj.hyperpolymath.dev:9999`)
+are pre-configured as bootstrap peers.  Set `BOJ_NODE_ID` to give your node a stable
+identity in the gossip network.
+
+For Podman Quadlet (systemd service), copy
+`container/boj-community-node.container` to
+`~/.config/containers/systemd/` and run `systemctl --user start boj-community-node`.
+
+The four canonical seed nodes are declared in `container/seed-nodes.toml`.
+
 == Further Reading
 
 - `docs/ARCHITECTURE.md` -- 2D matrix design

container/compose.prod.yaml

@@ -0,0 +1,97 @@
+# SPDX-License-Identifier: PMPL-1.0-or-later
+# Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
+#
+# BoJ Server — production node compose (Podman Compose compatible)
+#
+# Runs a fully operational BoJ node from the pre-built ghcr.io image.
+# Suitable for Umoja seed nodes and community volunteer nodes.
+#
+# Usage:
+#   # Pull latest image
+#   podman-compose -f container/compose.prod.yaml pull
+#
+#   # Start (daemonised)
+#   podman-compose -f container/compose.prod.yaml up -d
+#
+#   # View logs
+#   podman-compose -f container/compose.prod.yaml logs -f boj-rest
+#
+#   # Stop
+#   podman-compose -f container/compose.prod.yaml down
+#
+# Seed node environment variables:
+#   BOJ_NODE_ID       Stable node name (defaults to hostname; set for seeds)
+#   BOJ_SEED_NODES    Comma-separated host:port pairs to bootstrap federation
+#                     Defaults to the four continental Umoja seed nodes.
+#
+# For credential-forwarded cartridges set the relevant env vars:
+#   GITHUB_TOKEN, NOTIFYHUB_API_KEY, etc.
+# Callers can also supply credentials encrypted in the request body (Option A);
+# see docs/AUTH-DESIGN.adoc for the full credential forwarding design.
+
+services:
+  boj-rest:
+    image: ghcr.io/hyperpolymath/boj-server:latest
+    container_name: boj-node
+    restart: unless-stopped
+    ports:
+      - "7700:7700"
+      - "9999:9999/udp"
+    volumes:
+      - boj-node-data:/data:Z
+    environment:
+      # Server binding
+      APP_HOST: "[::]"
+      APP_PORT: "7700"
+      APP_DATA_DIR: "/data"
+      APP_LOG_FORMAT: "json"
+      # Federation
+      BOJ_QUIC: "1"
+      BOJ_FEDERATION_PORT: "9999"
+      # Override with a memorable name for seed nodes, e.g. "seed-eu-west"
+      # BOJ_NODE_ID: ""
+      # Bootstrap peers — defaults to all four Umoja seed nodes.
+      # Override for private/staging networks.
+      BOJ_SEED_NODES: "eu.boj.hyperpolymath.dev:9999,de.boj.hyperpolymath.dev:9999,us.boj.hyperpolymath.dev:9999,ap.boj.hyperpolymath.dev:9999"
+    security_opt:
+      - no-new-privileges:true
+    read_only: true
+    tmpfs:
+      - /tmp:size=64m,noexec,nosuid,nodev
+    healthcheck:
+      test: ["CMD", "curl", "-sf", "http://localhost:7700/health"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 30s
+
+  capability-gateway:
+    image: ghcr.io/hyperpolymath/boj-server:latest
+    container_name: boj-gateway
+    restart: unless-stopped
+    entrypoint: ["/app/gateway/bin/http_capability_gateway", "start"]
+    depends_on:
+      boj-rest:
+        condition: service_healthy
+    ports:
+      - "7800:7800"
+    environment:
+      GATEWAY_PORT: "7800"
+      GATEWAY_UPSTREAM: "http://boj-rest:7700"
+      BOJ_CARTRIDGES_ROOT: "/app/cartridges"
+      GATEWAY_LOG_FORMAT: "json"
+    security_opt:
+      - no-new-privileges:true
+    read_only: true
+    tmpfs:
+      - /tmp:size=32m,noexec,nosuid,nodev
+    healthcheck:
+      test: ["CMD", "curl", "-sf", "http://localhost:7800/health"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 15s
+
+volumes:
+  boj-node-data:
+    driver: local

llm-warmup-dev.md

@@ -84,8 +84,11 @@ web-ecosystem/
     lib/http_capability_gateway/
       policy_loader.ex      load_from_boj_catalog/1 — auto-generates policy from cartridge.json
 
-tools/cartridge-minter/     Rust CLI for minting new cartridges
-  Cargo.toml
+tools/                      Cartridge tooling (provisioner, configurator, harness)
+  cartridge-provisioner/
+  cartridge-configurator/
+  panel-harness/
+# Note: cartridge-minter (Node.js, banned) removed 2026-04-25. Use launch-scaffolder.
 
 panll/src/                  PanLL panel (ReScript/TEA)
 

llm-warmup-user.md

@@ -36,7 +36,7 @@ just doctor           # Check toolchain
 ## Prerequisites
 
 Idris2 >= 0.7.0, Zig >= 0.13, V (vlang) >= 0.4.4, just >= 1.25.
-Optional: Cargo (for cartridge-minter tool), cloudflared (for tunnels).
+Optional: Cargo (for launch-scaffolder — mint/provision/config cartridges), cloudflared (for tunnels).
 
 ## Cartridges (70+)