srift-transfer 4.0.0 → 4.1.0

package/README.md

@@ -3,7 +3,7 @@
 [![npm version](https://img.shields.io/npm/v/srift-transfer.svg?color=blue)](https://www.npmjs.com/package/srift-transfer)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 [![Node.js Version](https://img.shields.io/badge/node-%3E%3D20.0.0-brightgreen.svg)](https://nodejs.org/)
-[![MCP Protocol](https://img.shields.io/badge/MCP-2025--06--18-purple.svg)](https://modelcontextprotocol.io)
+[![MCP Protocol](https://img.shields.io/badge/MCP-2026--07--28-purple.svg)](https://modelcontextprotocol.io)
 [![Smithery](https://img.shields.io/badge/Smithery-srift%2Fsrift-7c3aed)](https://smithery.ai/servers/srift/srift)
 [![Glama](https://img.shields.io/badge/Glama-app.srift%2Fsrift-blueviolet.svg)](https://glama.ai/mcp/connectors/app.srift/srift)
 [![Encryption: AES-256-GCM](https://img.shields.io/badge/Encryption-AES--256--GCM-green.svg)](https://srift.app)
@@ -46,7 +46,8 @@ The user opens the link in any web browser or runs `srift get https://srift.app/
 > through the srift.app relay on demand (pass-through, nothing stored). It runs
 > in the background and survives your command exiting, so the link stays live
 > afterwards. But if the daemon stops (machine sleeps or reboots, or
-> `srift daemon stop`) the link returns `503 sender is offline`. In CI, keep
+> `srift daemon stop`) the link returns `503 sender is offline` for ~15 s, then
+> `404` once the link is released. In CI, keep
 > the job alive until the recipient has downloaded (`--wait` blocks until then).
 > If you need a link that outlives your machine, use storage — SRIFT is a relay.
 >
@@ -66,7 +67,7 @@ AI agents can communicate directly among themselves without human intervention.
 - Agent 1 initializes a secure room: `srift session start --name "Swarm-Sync"`
 - Agent 2 joins the room: `srift session join <sessionId>`
 - Agents exchange end-to-end encrypted messages and state updates: `srift chat send "{\"task\":\"analysis_complete\",\"status\":\"ready\"}"`
-- Agents transfer intermediate state files, memory checkpoints, or embeddings directly peer-to-peer: `srift send ./agent_state.bin`
+- Agents transfer intermediate state files, memory checkpoints, or embeddings over the encrypted relay: `srift send ./agent_state.bin`
 
 ### 🖥️ Headless Server & Cloud Container File Delivery via npm / npx
 
@@ -77,7 +78,7 @@ In headless cloud environments, Docker containers, Kubernetes pods, and CI/CD pi
 npx srift-transfer quick-share ./build/app-release.tar.gz --once --ttl 1h --wait
 # ↳ https://srift.app/d/9x2m4kp   (blocks until downloaded; the link is served from this job)
 ```
-- **Zero inbound firewall ports required** (connects via outbound WebSocket relay & WebRTC).
+- **Zero inbound firewall ports required** (connects out over the WebSocket relay on port 443).
 - **Zero cloud storage costs** (streams live from disk with zero server retention).
 - **Supports auto-expiry** (`--ttl 1h`) and single-use self-destruct (`--once`).
 
@@ -87,7 +88,7 @@ SRIFT runs across all server operating systems and deployment targets:
 - **Local & Server Environments (Linux, macOS, Windows, Docker, Kubernetes)**:
   Install via npm (`npm install -g srift-transfer` or `npx`) or standalone binary (`curl -fsSL https://srift.app/install.sh | sh`). Exposes all 15 MCP tools, CLI commands, and local HTTP REST daemon.
 - **Serverless & Browser Environments (Cloudflare Workers, Vercel Edge, AWS Lambda, Claude.ai, ChatGPT)**:
-  Use the hosted zero-install MCP endpoint: `POST https://srift.app/mcp` (Streamable HTTP, MCP spec 2025-06-18) with zero dependencies required.
+  Use the hosted zero-install MCP endpoint: `POST https://srift.app/mcp` (Streamable HTTP, MCP 2026-07-28; older clients such as 2025-06-18 accepted) with zero dependencies required. It exposes 9 session/control tools.
 
 
 ## 🚀 Installation
@@ -120,7 +121,7 @@ npx srift-transfer quick-share ./build/output.zip
 
 ## 🛠 Model Context Protocol (MCP) Setup
 
-SRIFT ships a native Model Context Protocol server exposing **14 agent tools**, resources, and prompt templates over the local stdio/HTTP transports. The hosted endpoint exposes 8 of them (see below).
+SRIFT ships a native Model Context Protocol server exposing **15 agent tools**, resources, and prompt templates over the local stdio/HTTP transports. The hosted endpoint exposes 9 of them (see below).
 
 ### Automatic One-Command Setup
 Run the auto-installer to print or register config into supported IDEs:
@@ -220,7 +221,7 @@ For web-based agents (ChatGPT, Claude.ai, Gemini, Perplexity) that cannot run lo
 
 > **The hosted endpoint exposes 9 of the 15 tools** — session and peer orchestration only
 > (`start_session`, `join_session`, `session_status`, `close_session`, `approve_join`,
-> `reject_join`, `kick_user`, `list_transfers`).
+> `reject_join`, `kick_user`, `list_transfers`, `net_diagnose`).
 > `quick_share`, `send_file`, `accept_transfer`, `send_chat`, `chat_history` and `read_state`
 > are **local-only**: the first three need access to your disk, and the chat tools would
 > require deriving session keys server-side. Install the CLI if you need those.
@@ -249,13 +250,13 @@ For web-based agents (ChatGPT, Claude.ai, Gemini, Perplexity) that cannot run lo
 | `srift_approve_join` | `tempUserId` (string) | Host control: approves a pending user join request. |
 | `srift_reject_join` | `tempUserId` (string), `reason?` (string) | Host control: rejects a pending user join request. |
 | `srift_kick_user` | `userId` (string) | Host control: kicks an active user from the session room. |
-| `srift_send_file` | `filePath` (string), `protocol?` ("webtorrent" \| "websocket") | Offers a file for direct peer-to-peer transfer to joined peers. |
+| `srift_send_file` | `filePath` (string) | Offers a file to the peers in the session (end-to-end encrypted relay, or WebRTC between browsers). |
 | `srift_accept_transfer` | `fileId` (string), `saveDir?` (string) | Accepts an inbound file offer and streams it to local disk. |
 | `srift_list_transfers` | _none_ | Lists active transfers with progress percentage, speed (KB/s), and ETA. |
 | `srift_send_chat` | `message` (string) | Sends an end-to-end encrypted chat message to the active session. |
 | `srift_chat_history` | _none_ | Returns decrypted chat message history for the active session. |
 | `srift_read_state` | _none_ | Returns atomic snapshot of `.srift-state.json` (transfers, session, peers). |
-| `srift_net_diagnose` | _none_ | Connectivity report (HTTPS, WebSocket, UDP, proxy, sandbox detection) with the exact fix — same checks as `srift doctor`. |
+| `srift_net_diagnose` | `fresh?`, `deep?` | Connectivity report (HTTPS, WebSocket, UDP, proxy, sandbox detection) with the exact fix — same checks as `srift doctor`. |
 
 ### MCP Resources & Prompts
 - **Resources**: `srift://session/status`, `srift://transfers/active`, `srift://chat/messages`, `srift://workspace/state`, `srift://docs/quickstart`
@@ -334,8 +335,8 @@ srift quick-share ./dist.zip --foreground                # serve from this proce
 srift get "https://srift.app/d/<token>" -o ./downloads/
 
 # Manage active links
-srift pubshare list                     # list all active public links and counters
-srift pubshare revoke <token>           # immediately revoke an active link
+srift links list                        # list all active public links and counters
+srift links revoke <token>              # immediately revoke an active link
 ```
 
 #### Sharing Several Files at Once
@@ -384,7 +385,7 @@ srift chat history                              # view decrypted room history
 srift daemon start                              # run daemon in foreground
 srift daemon status                             # daemon status and port
 srift daemon restart                            # restart daemon process
-srift doctor [--json]                           # connectivity diagnosis with exact fixes
+srift doctor [--deep] [--json] [--fresh]        # connectivity diagnosis with exact fixes
 srift logs [--tail 100]                         # inspect daemon activity logs
 srift reset                                     # flush session state & keys
 srift self-update                               # update to latest version
@@ -417,18 +418,18 @@ Subscribe to real-time events without polling:
 ```bash
 curl -N http://127.0.0.1:3822/api/v1/monitor/events
 ```
-Events emitted: `connection_state`, `join_request`, `file_offer`, `transfer_progress`, `chat_received`.
+Events emitted: `connection_state`, `join_request`, `participants`, `file_offer`, `transfer_progress`, `chat_received`, `pubshare_download`, `session_terminated`.
 
 ---
 
 ## 🔐 Architecture & Security
 
-- **End-to-End Cryptography**: All transferred data is encrypted client-side using **AES-256-GCM** with a distinct 12-byte initialization vector (IV) per block. Keys are derived locally via **PBKDF2-SHA256 (100,000 iterations)** from session IDs and optional room secrets.
+- **Cryptography**: Session transfers and `--encrypt` links are encrypted client-side with **AES-256-GCM** (distinct 12-byte IV per block); plain quick-share links are TLS-only in transit (zero retention). Session keys are derived locally via **PBKDF2-SHA256 (100,000 iterations)** from the session ID plus an optional room secret; without a room secret the key is derivable from the session ID (which the server sees), so use `--room-secret` to make it participant-only.
 - **Adaptive Transport Stack**:
-  1. **WebRTC DataChannels**: Peer-to-peer browser-to-browser direct transfer when both peers support WebRTC.
-  2. **WebTorrent**: Swarm-assisted peer-to-peer distribution for large files.
-  3. **WebSocket Relay**: Encrypted chunked streaming relay when firewalls or NAT prevent direct P2P connectivity.
-- **Privacy First**: The daemon binds to `127.0.0.1` only. The relay stores nothing; for sessions and `--encrypt` links it only ever forwards ciphertext and never sees keys.
+  1. **WebRTC**: browser↔browser, files >5 MB.
+  2. **AES-256-GCM WebSocket relay**: small files, and whenever WebRTC fails; the only transport the CLI daemon uses.
+  3. **WebTorrent**: optional, browser only.
+- **Privacy First**: The daemon binds to `127.0.0.1` only. The relay stores nothing; for sessions and `--encrypt` links it only ever forwards ciphertext and never receives the key.
 
 ---
 
@@ -441,6 +442,16 @@ Set custom configuration options via environment variables or `~/.srift/config.j
 | `SRIFT_DAEMON_PORT` | `3822` | Port for the local background daemon |
 | `SRIFT_BASE_URL` | `http://127.0.0.1:3822` | Base URL used by SDK clients to reach daemon |
 | `SRIFT_NO_UPDATE_CHECK` | `0` | Set to `1` to disable automatic update checks |
+| `SRIFT_LINK_PASSWORD` | — | Password for `quick-share --encrypt` / `get` without putting it in shell history |
+| `SRIFT_NO_HISTORY` | `0` | Set to `1` to stop recording created links in `~/.srift/history.jsonl` |
+| `SRIFT_NO_EMBEDDED` | `0` | Set to `1` to disable the in-process daemon fallback (sandboxes) |
+| `HTTPS_PROXY` / `NO_PROXY` | — | Proxy (`http://`, `https://`, `socks5://`), honoured everywhere |
+| `NODE_EXTRA_CA_CERTS` | — | Trust a TLS-inspecting proxy's root CA |
+| `SRIFT_AN_HOME` | `~/.srift/agentnet` | AgentNet identity and data directory |
+| `SRIFT_AN_RELAY` | `https://srift.app` | AgentNet relay(s), comma-separated |
+| `SRIFT_AN_EPHEMERAL` | `0` | `1` keeps AgentNet conversations in RAM only |
+| `SRIFT_AN_PASSPHRASE` | — | Encrypts the AgentNet identity file (PBKDF2-SHA256 + AES-256-GCM) |
+| `SRIFT_AN_TRANSPORT` | `ws` | `poll` forces HTTP long-poll (networks that block WebSockets) |
 
 ---
 
@@ -448,12 +459,14 @@ Set custom configuration options via environment variables or `~/.srift/config.j
 
 First-party, zero-dependency SDKs for accessing SRIFT from any programming language:
 
-- **Node.js**: [`sdk/node`](https://github.com/srivardhan113/SRIFT-Open_Source/tree/main/sdk/node) (`npm install srift`)
-- **Python**: [`sdk/python`](https://github.com/srivardhan113/SRIFT-Open_Source/tree/main/sdk/python) (CPython 3.8+, PyPy, asyncio)
+- **Node.js**: [`sdk/node`](https://github.com/srivardhan113/SRIFT-Open_Source/tree/main/sdk/node) (`curl -O https://srift.app/sdk/node/srift.mjs` — not on npm yet)
+- **Python**: `pip install srift` (includes the CLI) — [`sdk/python`](https://github.com/srivardhan113/SRIFT-Open_Source/tree/main/sdk/python) (`pip install srift` needs Python 3.9+; the single-file `srift.py` works on CPython 3.8+ and PyPy)
 - **Go**: [`sdk/go`](https://github.com/srivardhan113/SRIFT-Open_Source/tree/main/sdk/go) (Go 1.21+)
 - **Rust**: [`sdk/rust`](https://github.com/srivardhan113/SRIFT-Open_Source/tree/main/sdk/rust) (sync/async)
 - **Java**: [`sdk/java`](https://github.com/srivardhan113/SRIFT-Open_Source/tree/main/sdk/java) (Java 11+)
 - **C# / .NET**: [`sdk/dotnet`](https://github.com/srivardhan113/SRIFT-Open_Source/tree/main/sdk/dotnet) (.NET 6+)
+- **PHP**: [`sdk/php`](https://github.com/srivardhan113/SRIFT-Open_Source/tree/main/sdk/php) (PHP 7.4+)
+- **Ruby**: [`sdk/ruby`](https://github.com/srivardhan113/SRIFT-Open_Source/tree/main/sdk/ruby) (Ruby 2.7+)
 - **Shell / Bash / PowerShell**: [`sdk/shell`](https://github.com/srivardhan113/SRIFT-Open_Source/tree/main/sdk/shell)
 
 ---