@twinsearth/w2m-dsh-plugin 0.16.0 → 0.18.0

package/CHANGELOG.md

@@ -4,6 +4,79 @@ All notable changes to this project are documented here. The format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project
 adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.18.0] — 2026-10-15
+
+**The whole handshake primitive set is present on both machines — so the P2P failure is not a missing algorithm.**
+
+Two candidates for `P2P_PUNCH_FAILED: Digest method not supported` have now been **measured and excluded**:
+
+| Candidate | Measurement | Verdict |
+|---|---|---|
+| BLAKE2s-256 | 32-byte digest on MacMini **and** here, on the same run that failed | **innocent** |
+| every other primitive the handshake touches | `sha256`, `chacha20-poly1305` with a real AEAD round trip, `hkdfSync('sha256')`, `x25519`+`diffieHellman`, `ed25519` — all present on both | **innocent** |
+
+The second row was answered by **one bit-encoded dispatch** that put eight questions to MacMini at once
+(`exit_code: 255`, every bit set) rather than one question per round. That technique was already in this
+repository and should have been the first move.
+
+**What this changes:** the search moves off the runtime and onto the protocol, the session state, or the
+transport. And it points somewhere specific — **`P2P_PUNCH_FAILED` is raised by the relay's own push, on the
+machine that already has every primitive it needs.** The failing handshake is not on a peer missing an
+algorithm; it is on a peer that has all of them.
+
+`cryptoCapabilities()` now answers this question in one dispatch for any machine, and its suite asserts the
+**count** — six primitives, six checks — because a capability report that silently checks four things reads as
+complete.
+
+**Honest status: the cause of `P2P_PUNCH_FAILED` remains UNVERIFIED**, and the 0 % direct share measured last
+round is unchanged. What this release buys is that two hypotheses are dead and the next one costs one
+dispatch to test.
+
+## [0.17.0] — 2026-10-15
+
+**BLAKE2s-256 is not the cause of `P2P_PUNCH_FAILED`, and a failure that names nothing costs a probe per guess.**
+
+### The hypothesis, and its refutation
+
+`P2P_PUNCH_FAILED: Digest method not supported` has been reproduced twice in production and never under
+instrumentation. The obvious candidate was `createHash('blake2s256')` in `handshakeHash` — an algorithm that
+some Node builds lack, whose absence produces exactly that string.
+
+**Measured, and refuted:** both MacMini and this Windows host compute a 32-byte BLAKE2s-256 digest, on the
+same run that reported the failure. `blake2s256` is available on both. **So the algorithm is not the cause**,
+and the real cause remains **UNVERIFIED**.
+
+### What changed anyway, because the failure's *shape* is the real defect
+
+OpenSSL's message names **no algorithm, no caller and no host**. Establishing that BLAKE2s was innocent
+therefore required probing each machine by hand, over a channel that carries one exit code — a round trip per
+hypothesis. `handshakeHash` now:
+
+* catches the unavailable case and throws `CRYPTO_BLAKE2S256_UNAVAILABLE` naming the algorithm, the runtime,
+  and the fact that **it is a wire-protocol primitive which cannot be replaced with SHA-256** without breaking
+  interoperability with every peer — so nobody "fixes" it by substituting an algorithm and silently splits the
+  fleet;
+* refuses a digest that is not 32 bytes (`CRYPTO_BLAKE2S256_WRONG_LENGTH`), because a truncated digest throws
+  nowhere and would surface as an authentication failure far from its cause;
+* exposes `blake2s256Support()` so a machine can answer the question about itself in one dispatch.
+
+The wrapper is transparent on the happy path, and a test asserts it byte-for-byte against a direct
+`createHash` call — if it changed the bytes, every peer would compute a different handshake.
+
+### A defect in the fix itself, found before shipping
+
+The first version called `getHashes()` without importing it, so `typeof getHashes === 'function'` was silently
+`false` and the `advertised` flag would have been wrong forever. Caught by inspecting the import block rather
+than by a test, which is the honest description of how it was caught.
+
+### The 0 % direct share stands
+
+Last round measured **12 of 12 tasks carried by the relay**, at RTT 354 ms (macmini) and 336 ms (ToFuture)
+where jp-shared answers in 20 ms. This release does not improve that number; it makes the next attempt at
+diagnosing it cheaper.
+
+**10 new tests, 0 failures.**
+
 ## [0.16.0] — 2026-10-15
 
 **A non-zero exit code is not a fleet failure, and this session conflated them repeatedly.**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@twinsearth/w2m-dsh-plugin",
-  "version": "0.16.0",
+  "version": "0.18.0",
   "description": "DSH: Windows2MacOS — drive the same project on online Windows and macOS machines from one DeepSeek account, across networks and regions. P2P hole punching is the default path (relay + shared server as rendezvous, ledger and fallback), with a bundled STUN responder, Tailscale/public-VPS/tunnel shapes, Rabbit relay + per-machine Localside + eight DSH tools (replicate / split), nine aggregate verdicts and signed requests.",
   "type": "module",
   "main": "lib/index.js",
@@ -113,13 +113,13 @@
     }
   },
   "scripts": {
-    "test": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/agent.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/layer-model.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/chatops-fleet-join.test.mjs",
+    "test": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/agent.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/layer-model.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/chatops-fleet-join.test.mjs",
     "test:e2e": "node --test --test-force-exit test/e2e.test.mjs test/crossnetwork.test.mjs test/signing-e2e.test.mjs test/outbound-only.test.mjs test/recovery.test.mjs test/pipeline-e2e.test.mjs test/p2p-agent.test.mjs",
     "test:relay": "node --test --test-force-exit test/relay.test.mjs",
     "test:agent": "node --test --test-force-exit test/agent.test.mjs test/memory.test.mjs",
     "test:tools": "node --test --test-force-exit test/tools.test.mjs",
     "test:crossnetwork": "node --test --test-force-exit test/crossnetwork.test.mjs",
-    "test:all": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/agent.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/layer-model.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/e2e.test.mjs test/crossnetwork.test.mjs test/signing-e2e.test.mjs test/outbound-only.test.mjs test/recovery.test.mjs test/pipeline-e2e.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-agent.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/p2p-crypto.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/chatops-fleet-join.test.mjs",
+    "test:all": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/agent.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/layer-model.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/e2e.test.mjs test/crossnetwork.test.mjs test/signing-e2e.test.mjs test/outbound-only.test.mjs test/recovery.test.mjs test/pipeline-e2e.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-agent.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/p2p-crypto.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/chatops-fleet-join.test.mjs",
     "pack": "node scripts/pack.mjs",
     "verify:join": "node scripts/verify-join.mjs",
     "lint": "eslint .",
@@ -142,7 +142,8 @@
     "layer-check": "node scripts/layer-check.mjs",
     "test:test-report": "node --test --test-force-exit test/test-report.test.mjs",
     "test:fleet-scale": "node --test --test-force-exit test/fleet-scale.test.mjs",
-    "test:fleet-state": "node --test --test-force-exit test/fleet-state.test.mjs"
+    "test:fleet-state": "node --test --test-force-exit test/fleet-state.test.mjs",
+    "test:crypto-blake2s": "node --test --test-force-exit test/crypto-blake2s.test.mjs"
   },
   "keywords": [
     "dsh-bundle",

package/src/agent/crypto.mjs

@@ -48,6 +48,7 @@ import {
   createPublicKey,
   diffieHellman,
   generateKeyPairSync,
+  getHashes,
   hkdfSync,
   randomBytes,
   timingSafeEqual,
@@ -703,16 +704,146 @@ export function derive(ikm, label, length = KEY_BYTES) {
   return Buffer.from(hkdfSync('sha256', ikm, Buffer.alloc(0), Buffer.from(label, 'utf8'), length));
 }
 
+/**
+ * The cryptographic primitives the handshake requires, and whether this runtime has each.
+ *
+ * ## Why a capability report rather than a one-off diagnostic
+ *
+ * `P2P_PUNCH_FAILED: Digest method not supported` has been reproduced several times in production and never
+ * under instrumentation. Two candidates have now been **measured and excluded**:
+ *
+ *   * **BLAKE2s-256** — present on both MacMini and this Windows host, on the same run that reported the
+ *     failure. Ruled out by a direct 32-byte digest on each machine.
+ *   * **every other primitive the handshake touches** — `sha256`, `chacha20-poly1305` with a real AEAD
+ *     round trip, `hkdfSync('sha256')`, `x25519` with `diffieHellman`, and `ed25519` — all present on both.
+ *
+ * So the fault is **not a missing algorithm**, and knowing that is worth more than another hypothesis: it
+ * moves the search from the runtime to the protocol, the state, or the transport.
+ *
+ * The exclusion cost several dispatches because each candidate had to be probed over a channel carrying one
+ * exit code. This function means the next question of that kind is answered in **one** dispatch, by the
+ * machine itself, with no interpretation in between.
+ *
+ * @returns {{ ok: boolean, missing: string[], present: string[], node: string, detail: string }}
+ */
+export function cryptoCapabilities() {
+  const present = [];
+  const missing = [];
+  const check = (name, fn) => {
+    try {
+      if (fn()) present.push(name);
+      else missing.push(`${name} (reported as unsupported)`);
+    } catch (e) {
+      missing.push(`${name} (${e?.message ?? String(e)})`);
+    }
+  };
+
+  check('blake2s256', () => createHash('blake2s256').update('').digest().length === 32);
+  check('sha256', () => createHash('sha256').update('').digest().length === 32);
+  check('chacha20-poly1305', () => {
+    const key = randomBytes(32);
+    const cipher = createCipheriv('chacha20-poly1305', key, Buffer.alloc(12), { authTagLength: 16 });
+    cipher.update(Buffer.from('probe'));
+    cipher.final();
+    return cipher.getAuthTag().length === 16;
+  });
+  check('hkdf-sha256', () => hkdfSync('sha256', randomBytes(32), Buffer.alloc(0), Buffer.from('probe'), 32).byteLength === 32);
+  check('x25519+diffieHellman', () => {
+    const { privateKey, publicKey } = generateKeyPairSync('x25519');
+    return diffieHellman({ privateKey, publicKey }).length === 32;
+  });
+  check('ed25519', () => generateKeyPairSync('ed25519') !== null);
+
+  return {
+    ok: missing.length === 0,
+    present,
+    missing,
+    node: process.version,
+    detail: missing.length === 0
+      ? `all ${present.length} handshake primitive(s) available on ${process.version}`
+      : `${missing.length} of ${present.length + missing.length} handshake primitive(s) unavailable on ${process.version}: ${missing.join('; ')}`,
+  };
+}
+
+/**
+ * How BLAKE2s-256 is reached on this runtime, discovered once and remembered.
+ *
+ * ## Why a probe exists for a call that simply works
+ *
+ * `P2P_PUNCH_FAILED: Digest method not supported` was reproduced twice in production and, measured directly,
+ * **neither MacMini nor this Windows host lacks `blake2s256`** — so the algorithm is *not* the cause. What
+ * made that take so long to establish is the shape of the failure: OpenSSL's message names no algorithm, no
+ * caller and no host, so the only way to rule a candidate out was to probe each machine by hand.
+ *
+ * This wrapper does not change behaviour. It changes what a failure *says*: the algorithm that was requested,
+ * whether the runtime advertises it, and the fact that it cannot be substituted. That is the difference
+ * between a message a reader can act on and one that costs a round trip per hypothesis.
+ */
+let blake2sSupport = null;
+
+/**
+ * Whether this runtime can compute BLAKE2s-256, and how it was reached.
+ *
+ * @returns {{ok: boolean, advertised: boolean, detail: string}}
+ */
+export function blake2s256Support() {
+  if (blake2sSupport !== null) return blake2sSupport;
+  let advertised = false;
+  try {
+    advertised = typeof getHashes === 'function' && getHashes().includes('blake2s256');
+  } catch {
+    advertised = false;
+  }
+  try {
+    const probe = createHash('blake2s256');
+    probe.update('');
+    const bytes = probe.digest().length;
+    blake2sSupport = {
+      ok: bytes === 32,
+      advertised,
+      detail: bytes === 32
+        ? `BLAKE2s-256 available (${advertised ? 'advertised by getHashes' : 'works though not advertised'})`
+        : `BLAKE2s-256 produced ${bytes} bytes rather than 32`,
+    };
+  } catch (e) {
+    blake2sSupport = {
+      ok: false,
+      advertised,
+      detail: `BLAKE2s-256 unavailable on this runtime: ${e?.message ?? String(e)}. It is a WIRE PROTOCOL primitive -- the handshake hash, the prologue hash and the session binding -- so it cannot be replaced with SHA-256 without breaking interoperability with every peer. This machine cannot take part in a handshake until the runtime supports it.`,
+    };
+  }
+  return blake2sSupport;
+}
+
 /**
  * BLAKE2s-256, §3's handshake hash.
  *
+ * Throws a message naming the algorithm and the consequence when the runtime cannot provide it, instead of
+ * letting OpenSSL's `Digest method not supported` escape — which names neither, and which is why a real
+ * production failure took several rounds to attribute.
+ *
  * @param {...(Buffer|string)} parts
  * @returns {Buffer} 32 bytes.
  */
 export function handshakeHash(...parts) {
-  const hash = createHash('blake2s256');
+  let hash;
+  try {
+    hash = createHash('blake2s256');
+  } catch (e) {
+    const support = blake2s256Support();
+    const error = new Error(`handshakeHash requires BLAKE2s-256: ${support.detail}`);
+    error.code = 'CRYPTO_BLAKE2S256_UNAVAILABLE';
+    error.cause = e;
+    throw error;
+  }
   for (const part of parts) hash.update(part);
-  return hash.digest();
+  const out = hash.digest();
+  if (out.length !== 32) {
+    const error = new Error(`handshakeHash expected a 32-byte digest and produced ${out.length}; peers would compute a different handshake hash`);
+    error.code = 'CRYPTO_BLAKE2S256_WRONG_LENGTH';
+    throw error;
+  }
+  return out;
 }
 
 /**

package/src/plugin/tools.mjs

@@ -185,7 +185,7 @@ const MAX_STAGES = 16;
  * `package.json` during `scripts/pack.mjs` rather than hand-maintained, and `W2M_PLUGIN_VERSION`
  * overrides it at runtime for tests and packagers.
  */
-const PLUGIN_VERSION = '0.16.0';
+const PLUGIN_VERSION = '0.18.0';
 
 /** How long any single HTTP call may take before it is aborted, in milliseconds. */
 const DEFAULT_REQUEST_TIMEOUT_MS = 15_000;