Archon v0.10.0

[macterra]

Release Highlights

This release introduces end-to-end encrypted DIDComm Messaging v2, ships an Archon MCP server for AI-agent integration, adds node capability negotiation, and hardens mediator stability and deployment security.

✉️ DIDComm Messaging v2

A complete, interoperable DIDComm v2 implementation lands across the stack:

• Phases 0–7: TypeScript + Python parity, encrypted transport, messaging protocols, and endpoint auto-discovery (feat: DIDComm Messaging v2 (Phases 0–7): TS + Python parity, transport, protocols, auto-discovery #633)
• Phase 8: all sends routed through the DIDComm service for Tor egress (feat: DIDComm Phase 8 — route all sends through the service (Tor egress) #643)
• Mailbox reads now go through the local gateway rather than the public endpoint (fix: read DIDComm mailbox via the local gateway, not the public endpoint #646)
• Field fixes: pass ARCHON_DRAWBRIDGE_PUBLIC_HOST to the Drawbridge service for correct endpoint discovery (fix: pass ARCHON_DRAWBRIDGE_PUBLIC_HOST to the drawbridge service (#639) #640)
• Isolated the in-process DIDComm e2e from the unit run; added a DIDComm CLI e2e against Docker (test: run the in-process DIDComm e2e isolated (out of the unit run), drop the band-aid (#644) #650, Migrate the DIDComm transport e2e to a CLI test (out of the unit jest run) #644)

🤖 Archon MCP Server

• New Model Context Protocol (MCP) server exposing Archon to AI agents (feat: add Archon MCP server #605)
• Expanded MCP tooling toward full Keymaster CLI parity (feat: expand MCP server toward Keymaster CLI parity #606)

🧩 Node Capabilities

• Node capability manifest + client gating for optional services, so clients negotiate against what a node actually offers (feat: node capability manifest + client gating for optional services (Option C) #648)

🛠️ Mediator Stability

• Fixed Satoshi mediator OOM during pruned-block catch-up (fix: Satoshi mediator pruned block catch-up OOM #595)
• Stopped Satoshi historical-scan logging from exhausting memory (fix: stop Satoshi historical scan log OOM #604)

🔒 Security & Deployment

• Bound the bundled Tor SOCKS port to localhost (fix: Bind bundled Tor SOCKS port to localhost #590)
• Hardened the LNbits CLN REST startup wait (fix: Harden LNbits CLN REST startup wait #591)

🚀 CI & Publishing

• Added a Python Keymaster PyPI publish workflow (ci: Add Python keymaster PyPI publish workflow #651)

📚 Documentation & Maintenance

• New Clean Architecture assessment doc (docs: add Clean Architecture assessment #587)

What's Changed

• chore: Init v0.10.0 by @macterra in chore: Init v0.10.0 #588
• docs: add Clean Architecture assessment by @macterra in docs: add Clean Architecture assessment #587
• fix: Bind bundled Tor SOCKS port to localhost by @macterra in fix: Bind bundled Tor SOCKS port to localhost #590
• fix: Harden LNbits CLN REST startup wait by @macterra in fix: Harden LNbits CLN REST startup wait #591
• fix: Satoshi mediator pruned block catch-up OOM by @macterra in fix: Satoshi mediator pruned block catch-up OOM #595
• fix: stop Satoshi historical scan log OOM by @macterra in fix: stop Satoshi historical scan log OOM #604
• feat: add Archon MCP server by @macterra in feat: add Archon MCP server #605
• feat: expand MCP server toward Keymaster CLI parity by @macterra in feat: expand MCP server toward Keymaster CLI parity #606
• feat: DIDComm Messaging v2 (Phases 0–7): TS + Python parity, transport, protocols, auto-discovery by @macterra in feat: DIDComm Messaging v2 (Phases 0–7): TS + Python parity, transport, protocols, auto-discovery #633
• fix: pass ARCHON_DRAWBRIDGE_PUBLIC_HOST to the drawbridge service (docker/compose/drawbridge.yml: drawbridge service env missing ARCHON_DRAWBRIDGE_PUBLIC_HOST, causing publish-didcomm to advertise the Tor onion instead of the configured clearnet URL #639) by @macterra in fix: pass ARCHON_DRAWBRIDGE_PUBLIC_HOST to the drawbridge service (#639) #640
• chore: remove the throwaway DIDComm Phase 0 spike by @macterra in chore: remove the throwaway DIDComm Phase 0 spike #641
• feat: DIDComm Phase 8 — route all sends through the service (Tor egress) by @macterra in feat: DIDComm Phase 8 — route all sends through the service (Tor egress) #643
• fix: read DIDComm mailbox via the local gateway, not the public endpoint by @macterra in fix: read DIDComm mailbox via the local gateway, not the public endpoint #646
• feat: node capability manifest + client gating for optional services (Option C) by @macterra in feat: node capability manifest + client gating for optional services (Option C) #648
• test: run the in-process DIDComm e2e isolated (out of the unit run), drop the band-aid (Migrate the DIDComm transport e2e to a CLI test (out of the unit jest run) #644) by @macterra in test: run the in-process DIDComm e2e isolated (out of the unit run), drop the band-aid (#644) #650
• ci: Add Python keymaster PyPI publish workflow by @macterra in ci: Add Python keymaster PyPI publish workflow #651

Full Changelog: v0.9.0...v0.10.0

---

This discussion was created from the release Archon v0.10.0.