meta-core claims model: pin meta-core 2.0.1, meta-read 1.4.1, meta-watch 1.1.0, meta-search 1.3.2, meta-share 2.7.0, gateway 1.1.1, meta-sort 1.1.1, plugins 1.1.0; signing keys + db-cache backup exclude

Apps/MetaFeederProwlarr/docker-compose.yml

@@ -40,7 +40,7 @@ services:
     # package, published as ${{ github.repository }}) was renamed. The old
     # `meta-feeder-indexer` package still exists but is frozen at 1.0.23 and
     # receives no further pushes. The APP keeps the `metafeederprowlarr` name.
-    image: ipcr-watch.nsl.sh/ipns/metadec.eth/metadec.eth/meta-feeder-torznab:1.0.45
+    image: ipcr-watch.nsl.sh/ipns/metadec.eth/metadec.eth/meta-feeder-torznab:1.1.0
     cpu_shares: 30
     container_name: metafeederprowlarr-feeder
     # Hard RAM cap, swap disabled (memswap_limit == mem_limit) → OOM
@@ -76,10 +76,15 @@ services:
       # was dropped — its 500 did match the default.
       META_GATEWAY_PROWLARR_PAGE_SIZE: "20"
       TZ: "$TZ"
+      # Own claim-signing key (self-published records); generated on first boot if missing.
+      METAMESH_SIGNING_KEY_FILE: "/keys/metafeederprowlarr-feeder.key"
     volumes:
       # Persist feeder config (config.json saved via the config UI) + redb cache.
       # Transient librqbit downloads go to the container's /tmp (off backup).
       - ${DATA_ROOT:-/DATA}/AppData/metafeederprowlarr/state:/data/meta-feeder:rw
+      # Claim-signing keys (meta-core 2.0.0 claims model), one file per writer
+      # service in this stack. Config — backed up, NOT in backup.exclude.
+      - ${DATA_ROOT:-/DATA}/AppData/metafeederprowlarr/keys:/keys:rw
     healthcheck:
       test: ["CMD", "curl", "-sf", "http://localhost:8080/health"]
       interval: 5s
@@ -102,7 +107,7 @@ services:
   # No healthcheck: these plugin images don't ship one (curl absent).
   # ---------------------------------------------------------------------------
   metafeederprowlarr-filename-parser:
-    image: ipcr-watch.nsl.sh/ipns/metadec.eth/metadec.eth/metamesh-plugin-filename-parser:1.0.5
+    image: ipcr-watch.nsl.sh/ipns/metadec.eth/metadec.eth/metamesh-plugin-filename-parser:1.1.0
     cpu_shares: 30
     container_name: metafeederprowlarr-filename-parser
     # Hard RAM cap, swap disabled (memswap_limit == mem_limit) → OOM
@@ -118,11 +123,17 @@ services:
       # (meta-sort's Scan card) sees it as bound elsewhere, never addable.
       BEACON_BINDS: "metafeederprowlarr-feeder"
       EMIT_TITLE_TAGS: "true"
+      # Own claim-signing key (enrichment claims); generated on first boot if missing.
+      METAMESH_SIGNING_KEY_FILE: "/keys/metafeederprowlarr-filename-parser.key"
+    volumes:
+      # Claim-signing keys (meta-core 2.0.0 claims model), one file per writer
+      # service in this stack. Config — backed up, NOT in backup.exclude.
+      - ${DATA_ROOT:-/DATA}/AppData/metafeederprowlarr/keys:/keys:rw
     networks:
       - metafeederprowlarr
 
   metafeederprowlarr-tmdb:
-    image: ipcr-watch.nsl.sh/ipns/metadec.eth/metadec.eth/metamesh-plugin-tmdb:1.0.5
+    image: ipcr-watch.nsl.sh/ipns/metadec.eth/metadec.eth/metamesh-plugin-tmdb:1.1.0
     cpu_shares: 30
     container_name: metafeederprowlarr-tmdb
     # Hard RAM cap, swap disabled (memswap_limit == mem_limit) → OOM
@@ -145,8 +156,13 @@ services:
       # unavailable" and silently writes no posters/backdrops, so every record then
       # fails meta-watch's poster gate. Drop only after re-tagging the plugin.
       WEBDAV_URL: "http://metacore-app:9000/webdav"
+      # Own claim-signing key (enrichment claims); generated on first boot if missing.
+      METAMESH_SIGNING_KEY_FILE: "/keys/metafeederprowlarr-tmdb.key"
     volumes:
       - ${DATA_ROOT:-/DATA}/AppData/metafeederprowlarr/tmdb-cache:/cache
+      # Claim-signing keys (meta-core 2.0.0 claims model), one file per writer
+      # service in this stack. Config — backed up, NOT in backup.exclude.
+      - ${DATA_ROOT:-/DATA}/AppData/metafeederprowlarr/keys:/keys:rw
     networks:
       - metafeederprowlarr
       - pcs
@@ -255,3 +271,6 @@ x-compose-app:
     - path: /DATA/AppData/metafeederprowlarr/tmdb-cache
       user: $PUID
       group: $PGID
+    - path: /DATA/AppData/metafeederprowlarr/keys
+      user: $PUID
+      group: $PGID