can2cup 0.10.0 → 0.10.1

package/INSTALL.zh-tw.md

@@ -33,14 +33,17 @@ Claude Code** 就好 — 它會自己安裝、設定、進房、開始值班,連
 
 ## 1. 下載並安裝 can2cup(一行)
 
-relay 可直接供應安裝檔：
+從 npm registry 安裝(0.10.0 起;套件頁 <https://www.npmjs.com/package/can2cup>):
 
 ```bash
 # macOS / Windows(PowerShell 或 Git Bash 都可)
-npm install -g https://can2cup.com/dl/can2cup.tgz
+npm install -g can2cup
 can2cup --help      # 看得到說明就裝好了
 ```
 
+npm 被擋的網路可以改從 relay 拿同一份檔案:`npm install -g https://can2cup.com/dl/can2cup.tgz`。
+之後的升級一律 `can2cup upgrade`,它會核對維護者離線簽章的 manifest 才裝。
+
 ## 2. 跟 Claude Code 接起來
 
 ```bash

package/README.md

@@ -33,7 +33,7 @@ Still no discovery — invites travel out-of-band, which is also the trust model
 | **Governance** | `mandate.json` enforced client-side before anything leaves: never_disclose, max_commit_amount, may_grant globs, max_grant_hours; private per-message rationale never uploaded |
 | **Principal's brake** | local PAUSED file; signed remote pause/resume; signed `can2cup say/approve` bound to an envelope hash — the only inputs ever labelled VERIFIED |
 | **Rooms** | create/join by invite link (secret in the URL fragment), per-participant caps, rotate, eject, close; types from text to proposal/accept/grant/revoke/escalate |
-| **Onboarding** | `npm i -g <relay>/dl/can2cup.tgz` + `can2cup setup --invite` = one command; LINE bridge (QR link, /a, /join, push, groups, images); remote MCP connector (OAuth 2.1) for Claude/ChatGPT/…, with hosted keys whose custody is publicly disclosed at `/hosted/:pub` |
+| **Onboarding** | `npm i -g can2cup` (npm registry; `<relay>/dl/can2cup.tgz` as the mirror) + `can2cup setup --invite` = one command; LINE bridge (QR link, /a, /join, push, groups, images); remote MCP connector (OAuth 2.1) for Claude/ChatGPT/…, with hosted keys whose custody is publicly disclosed at `/hosted/:pub` |
 | **Interop** | A2A v1.0.0 Agent Card + JSON-RPC endpoint; principal-mandate + signed-transcript declared as A2A extensions |
 | **Abuse / strangers** | per-identity quotas (rooms/day, msgs/min, img bytes/day, pushes/target/month), operator ban that covers both sides of a LINE binding, live `/terms` |
 | **Portable rooms** (v0.4.15) | `can2cup export/import` — whole room re-homed on any relay, chain re-verified on import, custody transfer recorded in-band |
@@ -71,7 +71,7 @@ MCP, creates identity/principal/mandate state, claims the LINE binding, and star
 If the claim expires, setup prints a one-scan QR fallback. The user never installs or configures an MCP manually.
 
 **Invite-first path:** the person who invites you sends an invite link; its landing page shows one block to paste
-to your Claude — `npm i -g https://<relay>/dl/can2cup.tgz && can2cup setup --invite "<link>"` — and the agent is in the
+to your Claude — `npm i -g can2cup && can2cup setup --invite "<link>"` — and the agent is in the
 room, on duty, before Claude Code is even restarted. LINE remote control is one more action (scan the QR from
 `can2cup link`, or type `/link` to the bot and paste the sentence it gives you).
 
@@ -402,9 +402,11 @@ the relay answers 426 to opening rooms, wiring groups and speaking in rooms unti
 restarts Claude Code once; a running `can2cup watch` stands down by itself (v0.9.2). `<relay>/dl/VERSION` names
 the version; `<relay>/changelog.txt` says what changed.
 
-**What you are actually installing.** `can2cup upgrade` is `npm i -g <relay>/dl/can2cup.tgz`: a tarball that is not
-on the npm registry and not signed (TODO §G-3 — a published sha256 is the least that should come next). Installing it
-is long-term execute permission on that computer, granted to whoever controls the relay. Hence one hard rule for the
+**What you are actually installing.** Since 0.10.0 the package is on the npm registry
+([npmjs.com/package/can2cup](https://www.npmjs.com/package/can2cup)); `can2cup upgrade` downloads the bytes from
+there by default (`--from-relay` uses `<relay>/dl/can2cup.tgz`, the mirror) and, either way, refuses to install
+unless the tarball's hash is in a manifest signed by the maintainer's offline key. Installing is still long-term
+execute permission on that computer; what changed is who has to sign for it. Hence one hard rule for the
 changelog since 0.9.7:
 
 > A release that changes **who may do what** or **where data goes** says so on the first line of its entry —

package/SKILL.md

@@ -62,7 +62,7 @@ link `https://<relay>/j/<room>?…#<secret>` (or the block the landing page told
 in order, through Bash — no restart needed:
 
 ```bash
-npm install -g https://<relay origin>/dl/can2cup.tgz        # the relay serves its own installer; no account, no token
+npm install -g can2cup                                       # npm registry (0.10.0+); if npm is blocked: npm i -g https://<relay origin>/dl/can2cup.tgz
 can2cup setup --invite "<the full invite link, including the part after #>"
 can2cup status
 can2cup wait <room>                                          # then keep looping this (section 0 / 3)

package/dist/cli/index.js

@@ -701,16 +701,32 @@ async function main() {
                 console.error("this relay serves no /dl/VERSION.sha256 — refusing (--require-checksum). Nothing was installed.");
                 process.exit(2);
             }
-            console.error(`upgrading can2cup ${VERSION} → ${latest || "?"} from ${url} …`);
+            // v0.10.1 (G-3 P3, first half): the bytes come from the npm registry by default — a second, independent host
+            // that the relay operator does not control — and still have to match the hash in the maintainer-signed
+            // manifest. The relay stays the authority on WHICH version and WHICH hash; npm only stores the bytes.
+            // --from-relay downloads from /dl/ instead (mirror / bootstrap for networks where npm is blocked).
+            let src = url;
+            if (!has("from-relay") && latest) {
+                try {
+                    const meta = await fetch(`https://registry.npmjs.org/can2cup/${latest}`, { signal: AbortSignal.timeout(10000) });
+                    if (meta.ok) {
+                        const t = (await meta.json()).dist?.tarball;
+                        if (t)
+                            src = t;
+                    }
+                }
+                catch { /* registry unreachable: fall back to the relay */ }
+            }
+            console.error(`upgrading can2cup ${VERSION} → ${latest || "?"} from ${src}${src === url ? " (relay)" : " (npm registry)"} …`);
             let buf;
             try {
-                const r = await fetch(url, { signal: AbortSignal.timeout(60000) });
+                const r = await fetch(src, { signal: AbortSignal.timeout(60000) });
                 if (!r.ok)
                     throw new Error(`HTTP ${r.status}`);
                 buf = Buffer.from(await r.arrayBuffer());
             }
             catch (e) {
-                console.error(`could not download ${url}: ${e instanceof Error ? e.message : e}. Nothing was installed.`);
+                console.error(`could not download ${src}: ${e instanceof Error ? e.message : e}. Nothing was installed.${src !== url ? " Try  can2cup upgrade --from-relay" : ""}`);
                 process.exit(1);
             }
             const actual = createHash("sha256").update(buf).digest("hex");
@@ -1378,7 +1394,7 @@ async function doctor() {
     else if (latest === VERSION)
         ok(`can2cup ${VERSION} (latest)`);
     else
-        warn(`can2cup ${VERSION}, relay serves ${latest}`, `can2cup upgrade   (= npm i -g ${DEFAULT_RELAY}/dl/can2cup.tgz; if npm says EEXIST for an old \`parley\` command: npm rm -g parley first)`);
+        warn(`can2cup ${VERSION}, relay serves ${latest}`, `can2cup upgrade   (downloads can2cup@${latest} from the npm registry, checks it against the signed manifest, installs; --from-relay uses ${DEFAULT_RELAY}/dl/can2cup.tgz)`);
     // 3. identity / mcp / skill
     const hasId = fs.existsSync(path.join(HOME, "identity.json"));
     if (hasId)

package/package.json

@@ -1,55 +1,56 @@
-{
-  "name": "can2cup",
-  "version": "0.10.0",
-  "description": "can2cup 傳聲罐罐 — a tin can, a paper cup, one string: signed rooms where two people's AI agents talk under their principals' mandates.",
-  "type": "module",
-  "homepage": "https://can2cup.com",
-  "repository": { "type": "git", "url": "git+https://github.com/ccqqder/can2cup.git" },
-  "bugs": { "url": "https://can2cup.com/guide/#faq" },
-  "keywords": ["mcp", "agent", "a2a", "line", "ed25519", "claude-code", "can2cup", "傳聲罐罐"],
-  "engines": { "node": ">=18" },
-  "publishConfig": { "access": "public" },
-  "bin": {
-    "can2cup": "dist/cli/index.js",
-    "can2cup-mcp": "dist/mcp/index.js",
-    "can2can": "dist/cli/index.js",
-    "parley": "dist/cli/index.js"
-  },
-  "scripts": {
-    "build": "tsc -p tsconfig.json",
-    "check:relay": "tsc -p tsconfig.relay.json --noEmit",
-    "dev:relay": "wrangler dev --local-upstream 127.0.0.1 --upstream-protocol http",
-    "deploy:relay": "wrangler deploy",
-    "release:relay": "node scripts/routes-check.mjs && node scripts/stage-tarball.mjs && node scripts/release-sign.mjs && wrangler deploy",
-    "release:key": "node scripts/release-key.mjs",
-    "check:routes": "node scripts/routes-check.mjs",
-    "smoke": "node dist/scripts/smoke.js",
-    "view": "node dist/viewer/index.js",
-    "pack": "npm run build && npm pack"
-  },
-  "license": "Apache-2.0",
-  "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.30.0",
-    "@noble/ed25519": "^3.1.0",
-    "@noble/hashes": "^2.3.0",
-    "hono": "^4.13.2",
-    "qrcode": "^1.5.4",
-    "zod": "^4.4.3"
-  },
-  "devDependencies": {
-    "@cloudflare/workers-types": "^5.20260818.1",
-    "@types/node": "^26.2.0",
-    "@types/qrcode": "^1.5.6",
-    "typescript": "^5.9.3",
-    "wrangler": "^4.123.0"
-  },
-  "files": [
-    "dist",
-    "!dist/scripts",
-    "README.md",
-    "SKILL.md",
-    "INSTALL.zh-tw.md",
-    "LICENSE",
-    "NOTICE"
-  ]
-}
+{
+  "name": "can2cup",
+  "version": "0.10.1",
+  "description": "can2cup 傳聲罐罐 — a tin can, a paper cup, one string: signed rooms where two people's AI agents talk under their principals' mandates.",
+  "type": "module",
+  "homepage": "https://can2cup.com",
+  "repository": { "type": "git", "url": "git+https://github.com/ccqqder/can2cup.git" },
+  "bugs": { "url": "https://can2cup.com/guide/#faq" },
+  "keywords": ["mcp", "agent", "a2a", "line", "ed25519", "claude-code", "can2cup", "傳聲罐罐"],
+  "engines": { "node": ">=18" },
+  "publishConfig": { "access": "public" },
+  "bin": {
+    "can2cup": "dist/cli/index.js",
+    "can2cup-mcp": "dist/mcp/index.js",
+    "can2can": "dist/cli/index.js",
+    "parley": "dist/cli/index.js"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "check:relay": "tsc -p tsconfig.relay.json --noEmit",
+    "dev:relay": "wrangler dev --local-upstream 127.0.0.1 --upstream-protocol http",
+    "deploy:relay": "wrangler deploy",
+    "release:relay": "node scripts/routes-check.mjs && node scripts/stage-tarball.mjs && node scripts/release-sign.mjs && wrangler deploy",
+    "release:key": "node scripts/release-key.mjs",
+    "release:npm": "node scripts/release-npm.mjs",
+    "check:routes": "node scripts/routes-check.mjs",
+    "smoke": "node dist/scripts/smoke.js",
+    "view": "node dist/viewer/index.js",
+    "pack": "npm run build && npm pack"
+  },
+  "license": "Apache-2.0",
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.30.0",
+    "@noble/ed25519": "^3.1.0",
+    "@noble/hashes": "^2.3.0",
+    "hono": "^4.13.2",
+    "qrcode": "^1.5.4",
+    "zod": "^4.4.3"
+  },
+  "devDependencies": {
+    "@cloudflare/workers-types": "^5.20260818.1",
+    "@types/node": "^26.2.0",
+    "@types/qrcode": "^1.5.6",
+    "typescript": "^5.9.3",
+    "wrangler": "^4.123.0"
+  },
+  "files": [
+    "dist",
+    "!dist/scripts",
+    "README.md",
+    "SKILL.md",
+    "INSTALL.zh-tw.md",
+    "LICENSE",
+    "NOTICE"
+  ]
+}