zas-agent 0.6.0 → 0.6.2

package/CHANGELOG.md

@@ -7,6 +7,55 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.6.2] - 2026-09-04
+
+### Added
+
+- The trace records the peer connection state, not only the ICE state.
+  ICE `connected` means a candidate pair answered; the peer connection
+  reaches `connected` only once DTLS completes. A session that holds an ICE
+  path and sends nothing over it used to look the same as one that never
+  found a path at all.
+- A failure that had a working ICE pair is now `channel_never_opened`, not
+  `connect_timeout`. Same clock, different fault: one is the candidate hunt,
+  the other is the handshake above it.
+- The verdict line carries the peer connection state and the data channel's
+  own state, so a stalled DTLS handshake and a stalled SCTP association can
+  be told apart from one line.
+- The selected candidate pair is read when ICE connects, not only when the
+  data channel opens. A run that connected and then went quiet reported
+  `pair=none` and looked as if it had never selected one.
+- `onicecandidateerror` is traced, by URL shape and error code only. A
+  gather that ends with no relay candidate now says whether the allocation
+  was refused or never answered.
+
+## [0.6.1] - 2026-09-04
+
+### Added
+
+- A Directo run now answers with the engine's own account of itself, not
+  only with one word. `zas_send_direct`, `zas_receive_direct` and `zas_jobs`
+  carry the candidate counts by type for both ends, the ICE and gathering
+  states, how many TURN URLs were supplied against how many the connection
+  kept, the selected pair, the restarts, and a timestamped trace of the
+  session: every candidate as it arrived, the state changes, and the verdict.
+  Types, transports and timings only — never an address, a port, a host name
+  or a credential. A run that fails on a machine you are not sitting at can
+  now be diagnosed from the tool result.
+- The thrown error behind a failure is kept as `detail`. The reason stays a
+  closed word for grouping; `detail` is the sentence the exception carried,
+  which every failure used to discard at the catch.
+
+### Fixed
+
+- The receiver pre-gathers a candidate pool. An agent hands its whole
+  candidate set over at once, so the far end could start checking before its
+  own relay candidates existed, connect on the first pair it found, and be
+  left with nothing when that pair died seconds later.
+- The transport of a candidate is read whichever way the peer wrote the line.
+  This package prefixes the SDP attribute, so its candidates used to be
+  reported with an unknown transport.
+
 ## [0.6.0] - 2026-09-03
 
 ### Added
@@ -156,7 +205,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   two separate identities that cannot read each other's keys.
 - Install snippets for Claude Code and Codex, printed by `zas-agent pair`.
 
-[Unreleased]: https://github.com/soke1556/zas-agent/compare/v0.3.0...HEAD
+[Unreleased]: https://github.com/soke1556/zas-agent/compare/v0.6.2...HEAD
+[0.6.2]: https://github.com/soke1556/zas-agent/compare/v0.6.1...v0.6.2
+[0.6.1]: https://github.com/soke1556/zas-agent/compare/v0.6.0...v0.6.1
+[0.6.0]: https://github.com/soke1556/zas-agent/compare/v0.5.1...v0.6.0
+[0.5.1]: https://github.com/soke1556/zas-agent/compare/v0.5.0...v0.5.1
+[0.5.0]: https://github.com/soke1556/zas-agent/compare/v0.4.0...v0.5.0
+[0.4.0]: https://github.com/soke1556/zas-agent/compare/v0.3.0...v0.4.0
 [0.3.0]: https://github.com/soke1556/zas-agent/compare/v0.2.1...v0.3.0
 [0.2.1]: https://github.com/soke1556/zas-agent/compare/v0.2.0...v0.2.1
 [0.2.0]: https://github.com/soke1556/zas-agent/compare/v0.1.1...v0.2.0

package/dist/cli.js

@@ -830,89 +830,6 @@ async function runPair(opts) {
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { z } from "zod";
 
-// src/direct.ts
-import { randomBytes } from "node:crypto";
-import { openAsBlob } from "node:fs";
-import { basename as basename2 } from "node:path";
-
-// src/shared/manifest.ts
-import { xchacha20poly1305 } from "@noble/ciphers/chacha";
-
-// src/shared/constants.ts
-var CHUNKER_VERSION = "chunker_v1";
-var CHUNK_MIN = 1 * 1024 * 1024;
-var CHUNK_AVG_BITS = 22;
-var CHUNK_MAX = 8 * 1024 * 1024;
-var STORAGE_V2_PART_BYTES = 16 * 1024 * 1024;
-var GEAR_SEED = "zas-gear-v1:";
-var HKDF_INFO_CHUNK_KEY = "zas-chunk-key-v1";
-var HKDF_INFO_CHUNK_NONCE = "zas-chunk-nonce-v1";
-var OPRF_CONTEXT = "OPRFV1-\0-ristretto255-SHA512";
-var MANIFEST_VERSION = 1;
-var ANON_EMPTY_TTL_MS = 30 * 60 * 1e3;
-var FREE_RELAY_MAX_BYTES = 50 * 1024 * 1024;
-var SAFE_STORED_FILE_LIMITS = {
-  anon: 30 * 1024 * 1024,
-  free: FREE_RELAY_MAX_BYTES,
-  pro: 200 * 1024 * 1024,
-  max: 200 * 1024 * 1024
-};
-var STORED_FILE_LIMITS_V2 = {
-  anon: 30 * 1024 * 1024,
-  free: FREE_RELAY_MAX_BYTES,
-  pro: 5 * 1024 * 1024 * 1024,
-  max: 20 * 1024 * 1024 * 1024
-};
-var STORAGE_LIMITS = {
-  anon: 30 * 1024 * 1024,
-  free: 100 * 1024 * 1024,
-  pro: null,
-  max: null
-};
-var THUMBNAIL_MAX_EDGE = 640;
-var THUMBNAIL_MAX_BYTES = 14e4;
-
-// src/shared/manifest.ts
-function newManifest(partial) {
-  return { v: MANIFEST_VERSION, chunker: CHUNKER_VERSION, ...partial };
-}
-var ENVELOPE_MAGIC = 90;
-var KEY_VERSION_LEGACY = 1;
-function envelopeVersion(sealed) {
-  if (sealed.length > 26 && sealed[0] === ENVELOPE_MAGIC && sealed[1] >= 1) return sealed[1];
-  return KEY_VERSION_LEGACY;
-}
-function sealBytes(key, version, plain) {
-  if (version < 1 || version > 255) throw new Error("key version out of range");
-  const nonce = new Uint8Array(24);
-  crypto.getRandomValues(nonce);
-  const ct = xchacha20poly1305(key, nonce).encrypt(plain);
-  return concatBytes(new Uint8Array([ENVELOPE_MAGIC, version]), nonce, ct);
-}
-function openSealed(key, sealed) {
-  const versioned = envelopeVersion(sealed) !== KEY_VERSION_LEGACY || sealed[0] === ENVELOPE_MAGIC;
-  if (versioned && sealed.length > 26) {
-    try {
-      return xchacha20poly1305(key, sealed.slice(2, 26)).decrypt(sealed.slice(26));
-    } catch {
-    }
-  }
-  return xchacha20poly1305(key, sealed.slice(0, 24)).decrypt(sealed.slice(24));
-}
-var sealRaw = sealBytes;
-var openRaw = openSealed;
-function sealManifest(channelKey, manifest, version = KEY_VERSION_LEGACY) {
-  return sealBytes(channelKey, version, new TextEncoder().encode(JSON.stringify(manifest)));
-}
-function openManifest(channelKey, sealed) {
-  const m = JSON.parse(new TextDecoder().decode(openSealed(channelKey, sealed)));
-  if (!Array.isArray(m.chunks)) m.chunks = [];
-  return m;
-}
-function decryptChannelName(channelKey, sealed) {
-  return new TextDecoder().decode(openSealed(channelKey, sealed));
-}
-
 // src/shared/direct.ts
 var DIRECT_OFFER_TTL_MS = 10 * 60 * 1e3;
 var DIRECT_CLAIMED_TTL_MS = 6 * 60 * 60 * 1e3;
@@ -948,6 +865,13 @@ var FRAME_CHUNK = 2;
 var FRAME_DONE = 3;
 var FRAME_ABORT = 4;
 var FRAME_CREDIT = 5;
+function directMetaOf(file, fallbackName) {
+  return {
+    name: file.name || fallbackName || "zas",
+    size: file.size,
+    mime: file.type || "application/octet-stream"
+  };
+}
 function encodeMeta(meta) {
   const body = new TextEncoder().encode(JSON.stringify(meta));
   const frame = new Uint8Array(1 + body.length);
@@ -1020,9 +944,66 @@ function candType(candidate) {
   const m = /\styp\s+(\S+)/.exec(candidate?.candidate ?? "");
   return m ? m[1] : "other";
 }
+function candProto(candidate) {
+  const line = candidate?.candidate ?? "";
+  const m = /^(?:a=)?(?:candidate:)?\S+\s+\d+\s+(\S+)/.exec(line);
+  const proto = m ? m[1].toLowerCase() : "?";
+  const tcp = /\stcptype\s+(\S+)/.exec(line);
+  return tcp ? `${proto}/${tcp[1]}` : proto;
+}
+var TRACE_MAX = 200;
+var DETAIL_MAX = 200;
+function errText(e) {
+  const raw = e instanceof Error ? e.message || e.name : String(e);
+  const line = raw.replace(/\s+/g, " ").trim();
+  return line.length > DETAIL_MAX ? `${line.slice(0, DETAIL_MAX)}\u2026` : line;
+}
+var traceStart = /* @__PURE__ */ new WeakMap();
+function traceAdd(diag, line) {
+  if (diag.trace.length >= TRACE_MAX) return;
+  if (diag.trace.length === TRACE_MAX - 1) {
+    diag.trace.push("trace full");
+    return;
+  }
+  const t0 = traceStart.get(diag);
+  const at = t0 === void 0 ? 0 : (Date.now() - t0) / 1e3;
+  diag.trace.push(`${at.toFixed(2)} ${line}`);
+}
+function urlShape(url) {
+  const scheme = /^(stuns?|turns?):/i.exec(url)?.[1]?.toLowerCase() ?? "other";
+  const transport = /[?&]transport=(\w+)/i.exec(url)?.[1]?.toLowerCase();
+  return transport ? `${scheme}/${transport}` : scheme;
+}
+function iceShapes(servers) {
+  const seen = /* @__PURE__ */ new Map();
+  for (const server of servers ?? []) {
+    const urls = typeof server.urls === "string" ? [server.urls] : server.urls;
+    for (const url of urls ?? []) {
+      const shape = urlShape(url);
+      seen.set(shape, (seen.get(shape) ?? 0) + 1);
+    }
+  }
+  const parts = [...seen].map(([shape, n]) => `${shape}x${n}`);
+  return parts.length > 0 ? parts.join(" ") : "none";
+}
+function formatDirectDiagLines(d) {
+  const connect = d.msConnect === void 0 ? "-" : `${d.msConnect}ms`;
+  const pair = d.pairLocal || d.pairRemote ? `${d.pairLocal || "?"}/${d.pairRemote || "?"}` : "none";
+  return [
+    `ms=${d.ms} connect=${connect} bytes=${d.bytes} restarts=${d.restarts} pair=${pair}`,
+    ...d.detail === void 0 ? [] : [`detail ${d.detail}`],
+    `local host=${d.localHost} srflx=${d.localSrflx} relay=${d.localRelay}   remote host=${d.remoteHost} srflx=${d.remoteSrflx} relay=${d.remoteRelay}`,
+    `turn supplied=${d.turnUrlsSupplied} configured=${d.turnUrlsConfigured}   ice=${d.iceState} gather=${d.gatherState} remote_desc=${d.hadRemoteDesc}`,
+    ...d.trace ?? []
+  ];
+}
 function countCand(diag, side, c) {
-  if (!c) return;
+  if (!c) {
+    traceAdd(diag, `${side} end-of-candidates`);
+    return;
+  }
   const t = candType(c);
+  traceAdd(diag, `${side} ${t} ${candProto(c)}`);
   if (t === "host") diag[side === "local" ? "localHost" : "remoteHost"]++;
   else if (t === "srflx" || t === "prflx") diag[side === "local" ? "localSrflx" : "remoteSrflx"]++;
   else if (t === "relay") diag[side === "local" ? "localRelay" : "remoteRelay"]++;
@@ -1063,7 +1044,17 @@ function session(ice, onPhase, onDiag, iceTransportPolicy = "all") {
   const initialIce = ice ?? DIRECT_ICE;
   const pc = new RTCPeerConnection({
     iceServers: initialIce,
-    iceTransportPolicy
+    iceTransportPolicy,
+    // Gather before there is anything to gather for. A receiver whose peer
+    // is an agent gets the whole remote candidate set at once — the agent
+    // writes it and leaves — so checking starts in the same tick as the local
+    // description, a pair comes up on the first candidate found, and
+    // gathering is reported complete before any relay allocation returns.
+    // Measured 2026-09-04: one host candidate, no relay, gathering done at
+    // 240 ms, and when that pair died five seconds later there was nothing
+    // to fall back to. The pool does the allocations up front, at construction,
+    // so the relay candidates exist before the first check is ever sent.
+    iceCandidatePoolSize: 1
   });
   let phase = "connecting";
   let disconnectTimer;
@@ -1085,7 +1076,22 @@ function session(ice, onPhase, onDiag, iceTransportPolicy = "all") {
     turnUrlsSupplied: countTurnUrls(initialIce),
     turnUrlsConfigured: 0,
     bytes: 0,
-    restarts: 0
+    restarts: 0,
+    trace: []
+  };
+  traceStart.set(diag, startedAt);
+  traceAdd(diag, `ice servers ${iceShapes(initialIce)} policy=${iceTransportPolicy}`);
+  pc.onicegatheringstatechange = () => {
+    traceAdd(diag, `gather ${String(pc.iceGatheringState ?? "")}`);
+  };
+  const connState = () => String(pc.connectionState ?? "");
+  pc.onconnectionstatechange = () => {
+    traceAdd(diag, `conn ${connState()}`);
+  };
+  let channel;
+  pc.onicecandidateerror = (e) => {
+    const err = e;
+    traceAdd(diag, `ice error ${err.url ? urlShape(err.url) : "?"} code=${err.errorCode ?? "?"}`);
   };
   const cleanup = () => {
     clearTimeout(waitTimer);
@@ -1094,6 +1100,9 @@ function session(ice, onPhase, onDiag, iceTransportPolicy = "all") {
     clearTimeout(restartTimer);
     pc.onicecandidate = null;
     pc.oniceconnectionstatechange = null;
+    pc.onicegatheringstatechange = null;
+    pc.onicecandidateerror = null;
+    pc.onconnectionstatechange = null;
     pc.close();
   };
   const setPhase = (p) => {
@@ -1105,6 +1114,10 @@ function session(ice, onPhase, onDiag, iceTransportPolicy = "all") {
       diag.gatherState = String(pc.iceGatheringState ?? "");
       diag.hadRemoteDesc = hasRemoteDescription(pc);
       diag.turnUrlsConfigured = countTurnUrls(pc.getConfiguration().iceServers);
+      traceAdd(
+        diag,
+        `${p}${diag.reason ? ` ${diag.reason}` : ""} ice=${diag.iceState} gather=${diag.gatherState} conn=${connState()} chan=${channel === void 0 ? "-" : String(channel.readyState ?? "")}`
+      );
       onDiag?.(diag);
       onPhase(p);
       cleanup();
@@ -1112,9 +1125,13 @@ function session(ice, onPhase, onDiag, iceTransportPolicy = "all") {
     }
     onPhase(p);
   };
-  const fail = (reason) => {
+  const fail = (reason, cause) => {
     if (phase === "done" || phase === "failed") return;
     if (!diag.reason) diag.reason = reason;
+    if (cause !== void 0 && diag.detail === void 0) {
+      diag.detail = errText(cause);
+      traceAdd(diag, `detail ${diag.detail}`);
+    }
     setPhase("failed");
   };
   const waitTimer = setTimeout(() => fail("peer_silent"), DIRECT_SIGNAL_WAIT_MS);
@@ -1124,7 +1141,10 @@ function session(ice, onPhase, onDiag, iceTransportPolicy = "all") {
     if (heard) return;
     heard = true;
     clearTimeout(waitTimer);
-    connectTimer = setTimeout(() => fail("connect_timeout"), DIRECT_CONNECT_TIMEOUT_MS);
+    connectTimer = setTimeout(() => {
+      const iceUp = pc.iceConnectionState === "connected" || pc.iceConnectionState === "completed";
+      fail(iceUp ? "channel_never_opened" : "connect_timeout");
+    }, DIRECT_CONNECT_TIMEOUT_MS);
   };
   let onStall;
   let stallWindowMs = DIRECT_CONNECT_TIMEOUT_MS;
@@ -1138,12 +1158,14 @@ function session(ice, onPhase, onDiag, iceTransportPolicy = "all") {
     }
     stallState = "restarting";
     diag.restarts++;
+    traceAdd(diag, "ice restart");
     clearTimeout(restartTimer);
     restartTimer = setTimeout(() => fail("disconnected"), stallWindowMs);
     onStall();
   };
   pc.oniceconnectionstatechange = () => {
     const s = pc.iceConnectionState;
+    traceAdd(diag, `ice ${String(s ?? "")}`);
     if (s === "failed") {
       if (diag.msConnect !== void 0 && onStall) stalled();
       else fail("ice_failed");
@@ -1156,6 +1178,13 @@ function session(ice, onPhase, onDiag, iceTransportPolicy = "all") {
       clearTimeout(disconnectTimer);
       clearTimeout(restartTimer);
       stallState = "idle";
+      void pc.getStats().then((stats) => {
+        const pair = pairFromStats(stats);
+        if (!pair || diag.pairLocal) return;
+        diag.pairLocal = pair.local;
+        diag.pairRemote = pair.remote;
+        traceAdd(diag, `pair ${pair.local}/${pair.remote}`);
+      }).catch(() => void 0);
     }
   };
   return {
@@ -1168,15 +1197,20 @@ function session(ice, onPhase, onDiag, iceTransportPolicy = "all") {
     connected: () => {
       clearTimeout(waitTimer);
       clearTimeout(connectTimer);
-      if (diag.msConnect === void 0) diag.msConnect = Date.now() - startedAt;
+      if (diag.msConnect === void 0) {
+        diag.msConnect = Date.now() - startedAt;
+        traceAdd(diag, "channel open");
+      }
     },
     isTerminal: () => phase === "done" || phase === "failed",
+    setChannel: (dc) => void (channel = dc),
     setStall: (fn, windowMs) => {
       onStall = fn;
       stallWindowMs = windowMs;
     },
     setIceServers: (iceServers) => {
       diag.turnUrlsSupplied = countTurnUrls(iceServers);
+      traceAdd(diag, `ice servers replaced ${iceShapes(iceServers)}`);
       pc.setConfiguration({ iceServers });
     }
   };
@@ -1258,9 +1292,10 @@ function startSender(opts) {
       const offer = await pc.createOffer({ iceRestart: true });
       await pc.setLocalDescription(offer);
       await opts.send({ kind: "offer", sdp: offer.sdp, protocol: 2, generation });
-    })().catch(() => s.fail("signaling"));
+    })().catch((e) => s.fail("signaling", e));
   }, DIRECT_CONNECT_TIMEOUT_MS);
   const dc = pc.createDataChannel("zas-direct", { ordered: true });
+  s.setChannel(dc);
   dc.binaryType = "arraybuffer";
   dc.bufferedAmountLowThreshold = DIRECT_BUFFERED_HIGH / 8;
   const waitLow = () => new Promise((resolve2) => {
@@ -1285,9 +1320,7 @@ function startSender(opts) {
   };
   const pump = async () => {
     const meta = {
-      name: opts.file.name ?? opts.name ?? "zas",
-      size: opts.file.size,
-      mime: opts.file.type || "application/octet-stream",
+      ...directMetaOf(opts.file, opts.name),
       ...opts.label !== void 0 ? { label: opts.label } : {}
     };
     dc.send(encodeMeta(meta));
@@ -1326,7 +1359,7 @@ function startSender(opts) {
       s.diag.pairRemote = pair.remote;
       opts.onPath?.(pathOf(pair));
     }).catch(() => void 0);
-    void pump().catch(() => s.fail("transfer"));
+    void pump().catch((e) => s.fail("transfer", e));
   };
   dc.onmessage = (e) => {
     try {
@@ -1352,7 +1385,7 @@ function startSender(opts) {
     plumbing.setLocalGeneration(generation);
     plumbing.expectRemoteGeneration(generation);
     await opts.send({ kind: "offer", sdp: offer.sdp, protocol: 2, generation });
-  })().catch(() => s.fail("signaling"));
+  })().catch((e) => s.fail("signaling", e));
   return {
     accept: (msg) => {
       if (s.isTerminal()) return;
@@ -1362,7 +1395,7 @@ function startSender(opts) {
         if (msg.generation !== void 0 && answerGeneration !== generation) return;
         peerProtocol = msg.protocol === 2 ? 2 : 1;
         plumbing.expectRemoteGeneration(answerGeneration);
-        void pc.setRemoteDescription({ type: "answer", sdp: msg.sdp }).then(() => plumbing.remoteDescriptionSet(answerGeneration)).catch(() => s.fail("signaling"));
+        void pc.setRemoteDescription({ type: "answer", sdp: msg.sdp }).then(() => plumbing.remoteDescriptionSet(answerGeneration)).catch((e) => s.fail("signaling", e));
       }
       if (msg.kind === "ice") plumbing.applyIce(msg.candidate, msg.generation);
     },
@@ -1411,6 +1444,7 @@ function startReceiver(opts) {
   let finished = false;
   pc.ondatachannel = (e) => {
     dc = e.channel;
+    s.setChannel(dc);
     dc.binaryType = "arraybuffer";
     dc.onopen = () => {
       s.connected();
@@ -1435,7 +1469,7 @@ function startReceiver(opts) {
             s.fail(frame.meta.size > DIRECT_FILE_MAX_BYTES ? "too_big" : "protocol");
             return;
           }
-          if (opts.expectedMeta && (frame.meta.name !== opts.expectedMeta.name || frame.meta.size !== opts.expectedMeta.size || frame.meta.mime !== opts.expectedMeta.mime)) {
+          if (opts.expectedMeta && (frame.meta.name !== opts.expectedMeta.name || frame.meta.size !== opts.expectedMeta.size)) {
             dc?.send(ABORT_FRAME);
             s.fail("protocol");
             return;
@@ -1447,7 +1481,7 @@ function startReceiver(opts) {
             sinkRef = sink;
             return sink;
           });
-          pipeline.catch(() => s.fail("sink"));
+          pipeline.catch((e3) => s.fail("sink", e3));
         } else if (frame.type === "chunk") {
           if (!pipeline || finished) throw new Error("chunk_before_meta");
           queued += frame.payload.length;
@@ -1465,7 +1499,7 @@ function startReceiver(opts) {
             }
             return sink;
           });
-          pipeline.catch(() => s.fail("sink"));
+          pipeline.catch((e3) => s.fail("sink", e3));
         } else if (frame.type === "done") {
           if (!pipeline || finished) throw new Error("done_before_meta");
           finished = true;
@@ -1476,7 +1510,7 @@ function startReceiver(opts) {
             await sink.close();
             dc?.send(DONE_FRAME);
             s.setPhase("done");
-          }).catch(() => s.fail("integrity"));
+          }).catch((e3) => s.fail("integrity", e3));
         } else if (frame.type === "abort") {
           s.fail("peer_abort");
         }
@@ -1510,7 +1544,7 @@ function startReceiver(opts) {
           const answer = await pc.createAnswer();
           await pc.setLocalDescription(answer);
           await opts.send({ kind: "answer", sdp: answer.sdp, protocol: 2, generation });
-        })().catch(() => s.fail("signaling"));
+        })().catch((e) => s.fail("signaling", e));
       }
       if (msg.kind === "ice") plumbing.applyIce(msg.candidate, msg.generation);
     },
@@ -1527,6 +1561,89 @@ function startReceiver(opts) {
   };
 }
 
+// src/direct.ts
+import { randomBytes } from "node:crypto";
+import { openAsBlob } from "node:fs";
+import { basename as basename2 } from "node:path";
+
+// src/shared/manifest.ts
+import { xchacha20poly1305 } from "@noble/ciphers/chacha";
+
+// src/shared/constants.ts
+var CHUNKER_VERSION = "chunker_v1";
+var CHUNK_MIN = 1 * 1024 * 1024;
+var CHUNK_AVG_BITS = 22;
+var CHUNK_MAX = 8 * 1024 * 1024;
+var STORAGE_V2_PART_BYTES = 16 * 1024 * 1024;
+var GEAR_SEED = "zas-gear-v1:";
+var HKDF_INFO_CHUNK_KEY = "zas-chunk-key-v1";
+var HKDF_INFO_CHUNK_NONCE = "zas-chunk-nonce-v1";
+var OPRF_CONTEXT = "OPRFV1-\0-ristretto255-SHA512";
+var MANIFEST_VERSION = 1;
+var ANON_EMPTY_TTL_MS = 30 * 60 * 1e3;
+var FREE_RELAY_MAX_BYTES = 50 * 1024 * 1024;
+var SAFE_STORED_FILE_LIMITS = {
+  anon: 30 * 1024 * 1024,
+  free: FREE_RELAY_MAX_BYTES,
+  pro: 200 * 1024 * 1024,
+  max: 200 * 1024 * 1024
+};
+var STORED_FILE_LIMITS_V2 = {
+  anon: 30 * 1024 * 1024,
+  free: FREE_RELAY_MAX_BYTES,
+  pro: 5 * 1024 * 1024 * 1024,
+  max: 20 * 1024 * 1024 * 1024
+};
+var STORAGE_LIMITS = {
+  anon: 30 * 1024 * 1024,
+  free: 100 * 1024 * 1024,
+  pro: null,
+  max: null
+};
+var THUMBNAIL_MAX_EDGE = 640;
+var THUMBNAIL_MAX_BYTES = 14e4;
+
+// src/shared/manifest.ts
+function newManifest(partial) {
+  return { v: MANIFEST_VERSION, chunker: CHUNKER_VERSION, ...partial };
+}
+var ENVELOPE_MAGIC = 90;
+var KEY_VERSION_LEGACY = 1;
+function envelopeVersion(sealed) {
+  if (sealed.length > 26 && sealed[0] === ENVELOPE_MAGIC && sealed[1] >= 1) return sealed[1];
+  return KEY_VERSION_LEGACY;
+}
+function sealBytes(key, version, plain) {
+  if (version < 1 || version > 255) throw new Error("key version out of range");
+  const nonce = new Uint8Array(24);
+  crypto.getRandomValues(nonce);
+  const ct = xchacha20poly1305(key, nonce).encrypt(plain);
+  return concatBytes(new Uint8Array([ENVELOPE_MAGIC, version]), nonce, ct);
+}
+function openSealed(key, sealed) {
+  const versioned = envelopeVersion(sealed) !== KEY_VERSION_LEGACY || sealed[0] === ENVELOPE_MAGIC;
+  if (versioned && sealed.length > 26) {
+    try {
+      return xchacha20poly1305(key, sealed.slice(2, 26)).decrypt(sealed.slice(26));
+    } catch {
+    }
+  }
+  return xchacha20poly1305(key, sealed.slice(0, 24)).decrypt(sealed.slice(24));
+}
+var sealRaw = sealBytes;
+var openRaw = openSealed;
+function sealManifest(channelKey, manifest, version = KEY_VERSION_LEGACY) {
+  return sealBytes(channelKey, version, new TextEncoder().encode(JSON.stringify(manifest)));
+}
+function openManifest(channelKey, sealed) {
+  const m = JSON.parse(new TextDecoder().decode(openSealed(channelKey, sealed)));
+  if (!Array.isArray(m.chunks)) m.chunks = [];
+  return m;
+}
+function decryptChannelName(channelKey, sealed) {
+  return new TextDecoder().decode(openSealed(channelKey, sealed));
+}
+
 // src/shared/direct-fallback.ts
 function createFallbackMeta(file) {
   const key = crypto.getRandomValues(new Uint8Array(32));
@@ -2486,7 +2603,7 @@ async function sendDirect(ctx, input, report2, deps = {}) {
   const grant = await directGrantFor(ctx, input.channel);
   const key = channelKeyOf(ctx.identity, grant);
   const channelName = channelLabel(ctx, grant);
-  const file = await (deps.openFile ?? openAsBlob)(input.path).catch(() => {
+  const file = await (deps.openFile ?? openAsBlob)(input.path, { type: mimeFor(input.path) }).catch(() => {
     throw new ZasError("upload_failed", 400);
   });
   if (file.size > DIRECT_FILE_MAX_BYTES) throw new ZasError("file_too_big", 413);
@@ -2498,7 +2615,7 @@ async function sendDirect(ctx, input, report2, deps = {}) {
   const stamp = { device, owner_uid: owner };
   const startedAt = now();
   report2("offer");
-  const meta = { name, size: file.size, mime: mimeFor(input.path) };
+  const meta = directMetaOf(file, name);
   const { id } = await ctx.client.api("POST", `/direct/${cid}`, {
     meta_enc: seal(meta),
     key_version: grant.key_version,
@@ -2560,6 +2677,7 @@ async function sendDirect(ctx, input, report2, deps = {}) {
     },
     onDiag: (d) => {
       diag = d;
+      deps.onDiag?.(d);
     }
   });
   let over = false;
@@ -3144,6 +3262,7 @@ async function receiveDirect(ctx, input, report2, deps = {}) {
     },
     onDiag: (d) => {
       diag = d;
+      deps.onDiag?.(d);
     },
     sink: async (m) => {
       sink.open(m);
@@ -3292,7 +3411,10 @@ var JobRunner = class {
     const report2 = (phase) => {
       if (job.status === "running") job.phase = phase;
     };
-    this.settled.set(job, work(report2).then(
+    const note = (diag) => {
+      job.diag = diag;
+    };
+    this.settled.set(job, work(report2, note).then(
       (result) => {
         job.status = "done";
         job.result = result;
@@ -3806,7 +3928,7 @@ async function report(client, properties) {
 
 // src/server.ts
 function agentVersion() {
-  return true ? "0.6.0" : "0.0.0-dev";
+  return true ? "0.6.2" : "0.0.0-dev";
 }
 var AGENT_CUE = " The owner sees every item this agent sends with the >_ agent mark and this agent's name, on every device.";
 var PAIR_ANNOUNCE_MS = 15e3;
@@ -3866,10 +3988,17 @@ function buildServer(profile, deps = {}) {
     return { isError: true, ...text2(`${err.code}: ${humanSentence(err)}`) };
   };
   const settled = (job) => {
-    if (job.status === "done") return text2(job.result);
+    if (job.status === "done") {
+      return job.diag ? text2({ ...job.result, diag: formatDirectDiagLines(job.diag) }) : text2(job.result);
+    }
     if (job.status === "failed") {
       const e = job.error;
-      return failed(e ? new ZasError(e.code, e.status, e.message, e.retryAfterMs, e.serverCode) : new ZasError("internal", 0));
+      const answer = failed(e ? new ZasError(e.code, e.status, e.message, e.retryAfterMs, e.serverCode) : new ZasError("internal", 0));
+      if (!job.diag) return answer;
+      const said = answer.content[0].text;
+      return { isError: true, ...text2(`${said}
+
+${formatDirectDiagLines(job.diag).join("\n")}`) };
     }
     return text2({ job_id: job.id, status: "running", phase: job.phase });
   };
@@ -4015,9 +4144,10 @@ function buildServer(profile, deps = {}) {
         "direct",
         input.path,
         input.channel ?? "",
-        (report2) => sendDirect(c, input, report2, {
+        (report2, note) => sendDirect(c, input, report2, {
           ...deps.direct ?? {},
-          onFailed: (record) => rememberFailed(job.id, record)
+          onFailed: (record) => rememberFailed(job.id, record),
+          onDiag: note
         })
       );
       return settled(await runner.wait(job));
@@ -4067,9 +4197,10 @@ function buildServer(profile, deps = {}) {
         "receive",
         input.dest ?? "Directo",
         input.channel ?? "",
-        (report2) => receiveDirect(c, input, report2, {
+        (report2, note) => receiveDirect(c, input, report2, {
           ...deps.receive ?? {},
-          onFailed: (record) => rememberFailedReceive(job.id, record)
+          onFailed: (record) => rememberFailedReceive(job.id, record),
+          onDiag: note
         })
       );
       return settled(await runner.wait(job));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zas-agent",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "description": "MCP server that lets a coding agent send files and notes into your Zas channels, and send or receive files live through Directo.",
   "type": "module",
   "license": "MIT",