@twinsearth/w2m-dsh-plugin 0.17.0 → 0.19.0

package/CHANGELOG.md

@@ -4,6 +4,79 @@ All notable changes to this project are documented here. The format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project
 adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.19.0] — 2026-10-15
+
+**The plugin this machine runs is 0.9.5. The source tree is 0.18.0. Every source-level conclusion about the P2P failure was read from code that may not have run.**
+
+Measured, not inferred:
+
+```
+source    : 0.18.0
+installed : 0.9.5   at ...\profiles\desktop\node_modules\@twinsearth\w2m-dsh-plugin
+verdict   : installed 0.9.5 is 8995 rank(s) BEHIND the source 0.18.0
+            -- source-level conclusions about this machine are void
+```
+
+Reading `p2p-node.mjs` established which call raises `P2P_PUNCH_FAILED`, and it is raised **by the plugin
+process** — `tools.mjs:1463`, `node.dial(...)`, on the dispatching machine. That machine's plugin is **nine
+versions behind the file that was being read.** Two rounds of crypto-capability work were therefore correct
+about the code in this repository and only *possibly* correct about the code that failed.
+
+### Two runtime facts were assumed, and only one held
+
+| Assumption | Status |
+|---|---|
+| which node the plugin runs under | **holds** — the DSH process runs `dsh-primary-runtime/.../node.exe` v24.21.0, the same binary that was probed; the runtime was never the variable |
+| which plugin version is loaded | **did not hold** — 0.9.5 installed against 0.18.0 of source |
+
+The first was checked last and held; the second was never checked and did not. **A version skew is not a
+detail to note — it is a reason every source-level conclusion is void**, and it should have been the first
+thing measured rather than the last.
+
+### The invariant is now a test
+
+`test/installed-version.test.mjs` finds every plausible install location, compares numerically (because
+`'0.9.0' > '0.10.0'` as strings, and `0.9.5` against `0.18.0` is exactly the case that would be got wrong),
+and **reports the skew with both numbers** rather than failing an assertion nobody could act on. It also
+refuses to compare what it cannot parse, and **says so when it finds no installed copy** — because passing by
+absence is the same failure mode as an earlier skip guard in this repository, which passed for three rounds
+while hiding a defect in the tooling rather than in the code.
+
+### What is needed from a person
+
+**The local DSH must load the current plugin** for P2P diagnosis to mean anything. Until it does, this
+machine's `P2P_PUNCH_FAILED` comes from 0.9.5 and no reading of 0.19.0's source can explain it.
+
+**8 tests, 0 failures.**
+
+## [0.18.0] — 2026-10-15
+
+**The whole handshake primitive set is present on both machines — so the P2P failure is not a missing algorithm.**
+
+Two candidates for `P2P_PUNCH_FAILED: Digest method not supported` have now been **measured and excluded**:
+
+| Candidate | Measurement | Verdict |
+|---|---|---|
+| BLAKE2s-256 | 32-byte digest on MacMini **and** here, on the same run that failed | **innocent** |
+| every other primitive the handshake touches | `sha256`, `chacha20-poly1305` with a real AEAD round trip, `hkdfSync('sha256')`, `x25519`+`diffieHellman`, `ed25519` — all present on both | **innocent** |
+
+The second row was answered by **one bit-encoded dispatch** that put eight questions to MacMini at once
+(`exit_code: 255`, every bit set) rather than one question per round. That technique was already in this
+repository and should have been the first move.
+
+**What this changes:** the search moves off the runtime and onto the protocol, the session state, or the
+transport. And it points somewhere specific — **`P2P_PUNCH_FAILED` is raised by the relay's own push, on the
+machine that already has every primitive it needs.** The failing handshake is not on a peer missing an
+algorithm; it is on a peer that has all of them.
+
+`cryptoCapabilities()` now answers this question in one dispatch for any machine, and its suite asserts the
+**count** — six primitives, six checks — because a capability report that silently checks four things reads as
+complete.
+
+**Honest status: the cause of `P2P_PUNCH_FAILED` remains UNVERIFIED**, and the 0 % direct share measured last
+round is unchanged. What this release buys is that two hypotheses are dead and the next one costs one
+dispatch to test.
+
 ## [0.17.0] — 2026-10-15
 
 **BLAKE2s-256 is not the cause of `P2P_PUNCH_FAILED`, and a failure that names nothing costs a probe per guess.**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@twinsearth/w2m-dsh-plugin",
-  "version": "0.17.0",
+  "version": "0.19.0",
   "description": "DSH: Windows2MacOS — drive the same project on online Windows and macOS machines from one DeepSeek account, across networks and regions. P2P hole punching is the default path (relay + shared server as rendezvous, ledger and fallback), with a bundled STUN responder, Tailscale/public-VPS/tunnel shapes, Rabbit relay + per-machine Localside + eight DSH tools (replicate / split), nine aggregate verdicts and signed requests.",
   "type": "module",
   "main": "lib/index.js",
@@ -113,13 +113,13 @@
     }
   },
   "scripts": {
-    "test": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/agent.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/layer-model.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/chatops-fleet-join.test.mjs",
+    "test": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/agent.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/layer-model.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/chatops-fleet-join.test.mjs",
     "test:e2e": "node --test --test-force-exit test/e2e.test.mjs test/crossnetwork.test.mjs test/signing-e2e.test.mjs test/outbound-only.test.mjs test/recovery.test.mjs test/pipeline-e2e.test.mjs test/p2p-agent.test.mjs",
     "test:relay": "node --test --test-force-exit test/relay.test.mjs",
     "test:agent": "node --test --test-force-exit test/agent.test.mjs test/memory.test.mjs",
     "test:tools": "node --test --test-force-exit test/tools.test.mjs",
     "test:crossnetwork": "node --test --test-force-exit test/crossnetwork.test.mjs",
-    "test:all": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/agent.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/layer-model.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/e2e.test.mjs test/crossnetwork.test.mjs test/signing-e2e.test.mjs test/outbound-only.test.mjs test/recovery.test.mjs test/pipeline-e2e.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-agent.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/p2p-crypto.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/chatops-fleet-join.test.mjs",
+    "test:all": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/agent.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/layer-model.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/e2e.test.mjs test/crossnetwork.test.mjs test/signing-e2e.test.mjs test/outbound-only.test.mjs test/recovery.test.mjs test/pipeline-e2e.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-agent.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/p2p-crypto.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/chatops-fleet-join.test.mjs",
     "pack": "node scripts/pack.mjs",
     "verify:join": "node scripts/verify-join.mjs",
     "lint": "eslint .",
@@ -143,7 +143,8 @@
     "test:test-report": "node --test --test-force-exit test/test-report.test.mjs",
     "test:fleet-scale": "node --test --test-force-exit test/fleet-scale.test.mjs",
     "test:fleet-state": "node --test --test-force-exit test/fleet-state.test.mjs",
-    "test:crypto-blake2s": "node --test --test-force-exit test/crypto-blake2s.test.mjs"
+    "test:crypto-blake2s": "node --test --test-force-exit test/crypto-blake2s.test.mjs",
+    "test:installed-version": "node --test --test-force-exit test/installed-version.test.mjs"
   },
   "keywords": [
     "dsh-bundle",

package/src/agent/crypto.mjs

@@ -704,6 +704,67 @@ export function derive(ikm, label, length = KEY_BYTES) {
   return Buffer.from(hkdfSync('sha256', ikm, Buffer.alloc(0), Buffer.from(label, 'utf8'), length));
 }
 
+/**
+ * The cryptographic primitives the handshake requires, and whether this runtime has each.
+ *
+ * ## Why a capability report rather than a one-off diagnostic
+ *
+ * `P2P_PUNCH_FAILED: Digest method not supported` has been reproduced several times in production and never
+ * under instrumentation. Two candidates have now been **measured and excluded**:
+ *
+ *   * **BLAKE2s-256** — present on both MacMini and this Windows host, on the same run that reported the
+ *     failure. Ruled out by a direct 32-byte digest on each machine.
+ *   * **every other primitive the handshake touches** — `sha256`, `chacha20-poly1305` with a real AEAD
+ *     round trip, `hkdfSync('sha256')`, `x25519` with `diffieHellman`, and `ed25519` — all present on both.
+ *
+ * So the fault is **not a missing algorithm**, and knowing that is worth more than another hypothesis: it
+ * moves the search from the runtime to the protocol, the state, or the transport.
+ *
+ * The exclusion cost several dispatches because each candidate had to be probed over a channel carrying one
+ * exit code. This function means the next question of that kind is answered in **one** dispatch, by the
+ * machine itself, with no interpretation in between.
+ *
+ * @returns {{ ok: boolean, missing: string[], present: string[], node: string, detail: string }}
+ */
+export function cryptoCapabilities() {
+  const present = [];
+  const missing = [];
+  const check = (name, fn) => {
+    try {
+      if (fn()) present.push(name);
+      else missing.push(`${name} (reported as unsupported)`);
+    } catch (e) {
+      missing.push(`${name} (${e?.message ?? String(e)})`);
+    }
+  };
+
+  check('blake2s256', () => createHash('blake2s256').update('').digest().length === 32);
+  check('sha256', () => createHash('sha256').update('').digest().length === 32);
+  check('chacha20-poly1305', () => {
+    const key = randomBytes(32);
+    const cipher = createCipheriv('chacha20-poly1305', key, Buffer.alloc(12), { authTagLength: 16 });
+    cipher.update(Buffer.from('probe'));
+    cipher.final();
+    return cipher.getAuthTag().length === 16;
+  });
+  check('hkdf-sha256', () => hkdfSync('sha256', randomBytes(32), Buffer.alloc(0), Buffer.from('probe'), 32).byteLength === 32);
+  check('x25519+diffieHellman', () => {
+    const { privateKey, publicKey } = generateKeyPairSync('x25519');
+    return diffieHellman({ privateKey, publicKey }).length === 32;
+  });
+  check('ed25519', () => generateKeyPairSync('ed25519') !== null);
+
+  return {
+    ok: missing.length === 0,
+    present,
+    missing,
+    node: process.version,
+    detail: missing.length === 0
+      ? `all ${present.length} handshake primitive(s) available on ${process.version}`
+      : `${missing.length} of ${present.length + missing.length} handshake primitive(s) unavailable on ${process.version}: ${missing.join('; ')}`,
+  };
+}
+
 /**
  * How BLAKE2s-256 is reached on this runtime, discovered once and remembered.
  *

package/src/plugin/tools.mjs

@@ -185,7 +185,7 @@ const MAX_STAGES = 16;
  * `package.json` during `scripts/pack.mjs` rather than hand-maintained, and `W2M_PLUGIN_VERSION`
  * overrides it at runtime for tests and packagers.
  */
-const PLUGIN_VERSION = '0.17.0';
+const PLUGIN_VERSION = '0.19.0';
 
 /** How long any single HTTP call may take before it is aborted, in milliseconds. */
 const DEFAULT_REQUEST_TIMEOUT_MS = 15_000;