feat: bundle all service binaries in nix CLI package

The nix package now includes hathor-core, cpuminer, tx-mining-service,
and wallet-headless. Python/Node services are lazily installed into
~/.cache/hathor-forge/ on first run. `nix run github:HathorNetwork/hathor-forge -- --start`
now starts all services end-to-end.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: André

flake.nix

@@ -2,7 +2,7 @@
   description = "Hathor Forge - Local development environment for Hathor Network";
 
   inputs = {
-nixpkgs.url = "github:NixOS/nixpkgs/nixos-24.11";
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-24.11";
     flake-utils.url = "github:numtide/flake-utils";
     rust-overlay = {
       url = "github:oxalica/rust-overlay";
@@ -61,22 +61,56 @@ nixpkgs.url = "github:NixOS/nixpkgs/nixos-24.11";
           src = hathor-core-src;
         };
 
-        # CLI binary (no Tauri, no GUI dependencies)
-        hathorForgeCli = import ./nix/cli.nix {
+        # Build tx-mining-service from GitHub
+        txMiningService = import ./nix/tx-mining-service.nix {
+          inherit pkgs;
+          src = tx-mining-service-src;
+        };
+
+        # Build wallet-headless from GitHub
+        walletHeadless = import ./nix/wallet-headless.nix {
+          inherit pkgs;
+          src = wallet-headless-src;
+        };
+
+        # CLI binary (Rust, no Tauri)
+        cliUnwrapped = import ./nix/cli.nix {
           inherit pkgs rustToolchain;
         };
 
+        # Assemble a binaries directory that the CLI can find
+        binariesDir = pkgs.linkFarm "hathor-forge-binaries" [
+          { name = "hathor-core"; path = "${hathorCore}/bin/hathor-core"; }
+          { name = "cpuminer"; path = "${cpuminer}/bin/minerd"; }
+          { name = "tx-mining-service"; path = "${txMiningService}/bin/tx-mining-service"; }
+        ];
+
+        # Wrapped CLI with all service binaries and lazy setup
+        hathorForgeCli = pkgs.writeShellScriptBin "hathor-forge-cli" ''
+          export HATHOR_FORGE_BINARIES_DIR="${binariesDir}"
+          export PATH="${pkgs.nodejs_22}/bin:${pkgs.python312}/bin:$PATH"
+
+          # Lazy-setup wallet-headless on first use
+          HEADLESS_DIR=$(${walletHeadless}/bin/wallet-headless-setup)
+          export HATHOR_FORGE_HEADLESS_DIR="$HEADLESS_DIR"
+
+          exec ${cliUnwrapped}/bin/hathor-forge-cli "$@"
+        '';
+
       in {
         packages = {
           default = self.packages.${system}.hathor-forge-cli;
           hathor-forge-cli = hathorForgeCli;
+          hathor-forge-cli-unwrapped = cliUnwrapped;
           hathor-core = hathorCore;
           cpuminer = cpuminer;
+          tx-mining-service = txMiningService;
+          wallet-headless = walletHeadless;
 
           # Combined runtime bundle
           runtime = pkgs.symlinkJoin {
             name = "hathor-forge-runtime";
-            paths = [ hathorCore cpuminer ];
+            paths = [ hathorCore cpuminer txMiningService ];
           };
 
           # Placeholder for the full Tauri app (will be built via cargo)
@@ -124,6 +158,10 @@ nixpkgs.url = "github:NixOS/nixpkgs/nixos-24.11";
 
         # Runnable apps
         apps = {
+          default = {
+            type = "app";
+            program = "${hathorForgeCli}/bin/hathor-forge-cli";
+          };
           dev = {
             type = "app";
             program = toString (pkgs.writeShellScript "dev" ''

nix/hathor-core.nix

@@ -1,65 +1,32 @@
 { pkgs, src }:
 
-let
-  python = pkgs.python312;
-in
-pkgs.stdenv.mkDerivation rec {
-  pname = "hathor-core";
-  version = "0.69.0";
-
-  inherit src;
-
-  nativeBuildInputs = with pkgs; [
-    python
-    poetry
-    pkg-config
-    cmake
-  ];
-
-  buildInputs = with pkgs; [
-    rocksdb
-    snappy
-    openssl
-    readline
-    zlib
-    xz
-    bzip2
-    lz4
-  ];
-
-  # Don't run the normal build phases - we'll use poetry
-  dontBuild = true;
-  dontConfigure = true;
-
-  installPhase = ''
-    mkdir -p $out/bin $out/lib/hathor-core
-
-    # Copy source
-    cp -r . $out/lib/hathor-core/
-
-    # Create wrapper script that sets up the environment
-    cat > $out/bin/hathor-cli << EOF
-#!/usr/bin/env bash
-SCRIPT_DIR="\$(cd "\$(dirname "\''${BASH_SOURCE[0]}")" && pwd)"
-HATHOR_DIR="\$SCRIPT_DIR/../lib/hathor-core"
-
-# Set up environment
-export CFLAGS="-I${pkgs.rocksdb}/include"
-export LDFLAGS="-L${pkgs.rocksdb}/lib"
-export LD_LIBRARY_PATH="${pkgs.lib.makeLibraryPath [ pkgs.rocksdb pkgs.openssl pkgs.snappy ]}:\$LD_LIBRARY_PATH"
-export DYLD_LIBRARY_PATH="${pkgs.lib.makeLibraryPath [ pkgs.rocksdb pkgs.openssl pkgs.snappy ]}:\$DYLD_LIBRARY_PATH"
-
-# Use poetry to run hathor-cli
-cd "\$HATHOR_DIR"
-exec ${pkgs.poetry}/bin/poetry run hathor-cli "\$@"
-EOF
-    chmod +x $out/bin/hathor-cli
-  '';
-
-  meta = with pkgs.lib; {
-    description = "Hathor Network full-node";
-    homepage = "https://github.com/HathorNetwork/hathor-core";
-    license = licenses.asl20;
-    platforms = platforms.unix;
-  };
-}
+# hathor-core wrapper that sets up a Python venv on first run.
+# The venv is cached in ~/.cache/hathor-forge/hathor-core-venv/
+pkgs.writeShellScriptBin "hathor-core" ''
+  set -euo pipefail
+
+  CACHE_DIR="''${XDG_CACHE_HOME:-$HOME/.cache}/hathor-forge"
+  VENV_DIR="$CACHE_DIR/hathor-core-venv"
+  STAMP="$VENV_DIR/.installed-0.69.0"
+
+  if [ ! -f "$STAMP" ]; then
+    echo "Setting up hathor-core (first run, may take a minute)..." >&2
+    rm -rf "$VENV_DIR"
+    mkdir -p "$CACHE_DIR"
+
+    export CFLAGS="-I${pkgs.rocksdb}/include -I${pkgs.snappy}/include"
+    export LDFLAGS="-L${pkgs.rocksdb}/lib -L${pkgs.snappy}/lib"
+    export ROCKSDB_INCLUDE_DIR="${pkgs.rocksdb}/include"
+    export ROCKSDB_LIB_DIR="${pkgs.rocksdb}/lib"
+
+    ${pkgs.python312}/bin/python3 -m venv "$VENV_DIR"
+    "$VENV_DIR/bin/pip" install --upgrade pip wheel setuptools >&2
+    "$VENV_DIR/bin/pip" install "${src}" >&2
+
+    touch "$STAMP"
+    echo "hathor-core ready." >&2
+  fi
+
+  export LD_LIBRARY_PATH="${pkgs.lib.makeLibraryPath [ pkgs.rocksdb pkgs.openssl pkgs.snappy pkgs.zlib ]}''${LD_LIBRARY_PATH:+:$LD_LIBRARY_PATH}"
+  exec "$VENV_DIR/bin/hathor-cli" "$@"
+''

nix/tx-mining-service.nix

@@ -0,0 +1,56 @@
+{ pkgs, src }:
+
+# tx-mining-service wrapper that sets up a Python venv on first run.
+# The venv is cached in ~/.cache/hathor-forge/tx-mining-venv/
+pkgs.writeShellScriptBin "tx-mining-service" ''
+  set -euo pipefail
+
+  CACHE_DIR="''${XDG_CACHE_HOME:-$HOME/.cache}/hathor-forge"
+  VENV_DIR="$CACHE_DIR/tx-mining-venv"
+  STAMP="$VENV_DIR/.installed-0.22.0"
+  SRC="${src}"
+
+  if [ ! -f "$STAMP" ]; then
+    echo "Setting up tx-mining-service (first run, may take a minute)..." >&2
+    rm -rf "$VENV_DIR"
+    mkdir -p "$CACHE_DIR"
+
+    ${pkgs.python312}/bin/python3 -m venv "$VENV_DIR"
+    "$VENV_DIR/bin/pip" install --upgrade pip wheel setuptools >&2
+
+    # Install deps
+    "$VENV_DIR/bin/pip" install configargparse colorama aiohttp base58 structlog prometheus-client requests "hathorlib[client]" python-healthchecklib >&2
+
+    # Install txstratum from source
+    TMPDIR=$(mktemp -d)
+    cp -r "$SRC"/* "$TMPDIR/"
+    chmod -R u+w "$TMPDIR"
+    cd "$TMPDIR"
+
+    # Make it installable
+    if [ ! -f setup.py ]; then
+      cat > setup.py << 'SETUP'
+from setuptools import setup, find_packages
+setup(
+    name="tx-mining-service",
+    version="0.22.0",
+    packages=find_packages(),
+    entry_points={"console_scripts": ["tx-mining-service=txstratum.cli:main"]},
+)
+SETUP
+    fi
+
+    "$VENV_DIR/bin/pip" install . >&2
+    rm -rf "$TMPDIR"
+
+    # Copy log.conf
+    cp "$SRC/log.conf" "$VENV_DIR/" 2>/dev/null || true
+
+    touch "$STAMP"
+    echo "tx-mining-service ready." >&2
+  fi
+
+  # tx-mining-service looks for log.conf in cwd
+  cd "$VENV_DIR"
+  exec "$VENV_DIR/bin/tx-mining-service" "$@"
+''

nix/wallet-headless.nix

@@ -0,0 +1,43 @@
+{ pkgs, src }:
+
+# wallet-headless wrapper that builds the Node.js app on first run.
+# The build is cached in ~/.cache/hathor-forge/wallet-headless/
+pkgs.writeShellScriptBin "wallet-headless-setup" ''
+  set -euo pipefail
+
+  CACHE_DIR="''${XDG_CACHE_HOME:-$HOME/.cache}/hathor-forge"
+  BUILD_DIR="$CACHE_DIR/wallet-headless"
+  STAMP="$BUILD_DIR/.installed-0.36.1"
+  SRC="${src}"
+
+  if [ ! -f "$STAMP" ]; then
+    echo "Setting up wallet-headless (first run, may take a minute)..." >&2
+    rm -rf "$BUILD_DIR"
+    mkdir -p "$BUILD_DIR"
+
+    cp -r "$SRC"/* "$BUILD_DIR/"
+    chmod -R u+w "$BUILD_DIR"
+    cd "$BUILD_DIR"
+
+    # Remove patch-package from postinstall
+    ${pkgs.gnused}/bin/sed -i 's/"postinstall": "patch-package"/"postinstall": "echo skipping patches"/' package.json || true
+    ${pkgs.gnused}/bin/sed -i 's/"postinstall": "npx patch-package"/"postinstall": "echo skipping patches"/' package.json || true
+
+    # Force CommonJS output for Node 22 compat
+    cat > babel.config.json << 'EOF'
+{
+  "presets": [["@babel/preset-env", {"targets": {"node": "18"}, "modules": "commonjs"}]],
+  "plugins": ["@babel/plugin-proposal-class-properties"]
+}
+EOF
+
+    ${pkgs.nodejs_22}/bin/npm install --ignore-scripts >&2
+    ${pkgs.nodejs_22}/bin/npm install >&2
+    ${pkgs.nodejs_22}/bin/npm run build >&2
+
+    touch "$STAMP"
+    echo "wallet-headless ready." >&2
+  fi
+
+  echo "$BUILD_DIR"
+''