can2cup 0.10.3 → 0.10.4

package/wrangler.toml

@@ -0,0 +1,106 @@
+name = "parley-relay"
+main = "src/relay/index.ts"
+compatibility_date = "2026-08-01"
+
+# Declaring any route turns the workers.dev name OFF unless this stays explicit,
+# which would kill every invite link already handed out and force every connected
+# client to re-authorise. Both names serve the same worker; new links use the
+# custom one. Must sit above every table header — a key after [[routes]] belongs
+# to that route, not to the top level.
+workers_dev = true
+
+# The public name. Everything the relay hands out — Agent Card url, A2A extension
+# URIs, the OAuth issuer and its endpoints, invite links — is derived from the
+# request origin, so this is the only place the hostname is set.
+# 2026-09-03 rename (parley → can2can → can2cup): the can2cup name is canonical; the parley
+# domain stays up so every invite link and configured client keeps working.
+# At launch, can2cup.com (+ cup2can.com as a typo redirect) gets added here the same way.
+[[routes]]
+pattern = "can2cup.com"
+custom_domain = true
+
+[[routes]]
+pattern = "www.can2cup.com"
+custom_domain = true
+
+[[routes]]
+pattern = "can2cup.peachpitboat.com"
+custom_domain = true
+
+[[routes]]
+pattern = "can2can.peachpitboat.com"
+custom_domain = true
+
+[[routes]]
+pattern = "parley.peachpitboat.com"
+custom_domain = true
+
+[observability]
+enabled = true
+
+# Static assets: the install tarball, so `npm i -g https://<relay>/dl/parley.tgz` needs no token.
+# `npm run release:relay` copies the freshly packed tarball into relay-assets/dl/ before `deploy:relay`.
+[assets]
+directory = "./relay-assets"
+binding = "ASSETS"  # v0.9.0: the relay reads /dl/VERSION through this to fill x-can2cup-latest
+
+[[durable_objects.bindings]]
+name = "ROOMS"
+class_name = "RoomDO"
+
+[[migrations]]
+tag = "v1"
+new_sqlite_classes = ["RoomDO"]
+
+# Secrets (never in this file):
+#   wrangler secret put RELAY_KEY          — value required in X-Parley-Key to create rooms
+#   wrangler secret put RELAY_SIGNING_KEY  — hex ed25519 priv (v0.3): signs system events + transcript heads; GET / shows the pub
+# Local dev: put RELAY_KEY=... in .dev.vars
+
+[[durable_objects.bindings]]
+name = "BRIDGE"
+class_name = "BridgeDO"
+
+[[migrations]]
+tag = "v2"
+new_sqlite_classes = ["BridgeDO"]
+
+# Bridge (LINE bot) — see src/relay/bridge.ts
+#   wrangler secret put BRIDGE_KEY                shared with the bot (lilinene PARLEY_BRIDGE_KEY)
+#   wrangler secret put LINE_FORWARD_URL          the bot's push endpoint, e.g. https://lilinene.onrender.com/parley/push
+#   wrangler secret put LINE_CHANNEL_ACCESS_TOKEN (alternative: push straight to LINE from the worker)
+[vars]
+# v0.9.14 (G-4 R1): the relay's own name and its aliases. scripts/routes-check.mjs (run by release:relay) fails the
+# release when these drift from the [[routes]] above — that drift is how "five names, nobody said so" happened.
+RELAY_CANONICAL = "https://can2cup.com"
+RELAY_ALIASES = "https://www.can2cup.com,https://can2cup.peachpitboat.com,https://can2can.peachpitboat.com,https://parley.peachpitboat.com"
+PUSH_BUDGET = "180"
+# v0.8.1: `can2cup report` from any agent lands on the relay operator's LINE. Since 2026-09-06 the userId is a
+# wrangler secret (OPERATOR_LINE_USER_ID), not a var here — this file will be public one day.
+# How long a closed session's goodbye is held before the principal is told the agent is offline.
+# Must stay above the MCP's 60 s heartbeat: every Claude Code session runs its own MCP process under
+# the same agent key, so one window closing must not announce anything while siblings are alive.
+PRESENCE_GRACE_SEC = "90"
+# Abuse quotas (per identity; /terms renders these numbers)
+MSGS_PER_MIN = "60"
+ROOMS_PER_DAY = "10"
+MIN_CLIENT = "0.0.0"
+# v0.9.2: a room wired to a LINE group expires this long after its LAST message (not after creation).
+# v0.9.12: a 1:1 LINE binding lapses once the AGENT has been absent this long (warned 14 d ahead; the first 30 d
+# after the deploy that introduced it only warn). The boss set 90 on 2026-09-05. Dev overrides: IDLE_DAYS_SEC etc. in .dev.vars.
+IDLE_DAYS = "90"
+GROUP_ROOM_TTL_DAYS = "30"  # v0.9.0 upgrade protocol: below this, /p/rooms, /p/room-created, /p/invite and room sends answer 426. Raise only for incompatible protocol changes, after 7 days notice in known-issues.json
+IMG_BYTES_PER_DAY = "5000000"
+PUSH_USER_BUDGET = "60"
+# RFC 3161 Time Stamping Authority. UNSET = anchoring disabled and /rooms/:id/anchor answers 501.
+# When set, the relay takes a third-party timestamp over the transcript head on every commitment
+# (accept / grant) and on demand, so a reader does not have to trust the operator's clock.
+# freetsa.org proves the mechanism but is a free hobby service — point this at a commercial TSA
+# before anyone relies on the anchor as evidence.
+#   TSA_URL = "https://freetsa.org/tsr"
+# The LINE official account's basic ID (public add-friend id). Lets clients build
+# https://line.me/R/oaMessage/<id>/?<text> deep links: scan → chat opens with "/link CODE" prefilled.
+LINE_OA_ID = "@789jxzby"
+# Dedicated can2cup OA「傳聲罐罐 can2cup」= "@789jxzby" (created 2026-09-03; Provider can2cup, its own
+# userId pool). Switch this AND the LINE_FORWARD_URL secret together, only once the BOT_MODE=can2cup
+# Render service is live — the moment it flips, everyone has to /link again on the new bot.