srift 4.0.0__tar.gz

srift-4.0.0/.gitignore

@@ -0,0 +1,13 @@
+# Generated by build.py — bundled JS runtime, never hand-edited, must not be
+# committed (it is regenerated from cli/index.ts + cli/daemon.ts on every
+# build), but IS included inside the built wheel via [tool.hatch.build]
+# artifacts in pyproject.toml.
+src/srift_cli/_vendor/
+
+# Standard Python build/packaging output.
+dist/
+build/
+*.egg-info/
+__pycache__/
+*.pyc
+.venv/

srift-4.0.0/LICENSE

@@ -0,0 +1,22 @@
+MIT License
+
+Copyright (c) 2024-2026 SRIFT (Sripto Corporation Private Limited)
+https://srift.app
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

srift-4.0.0/PKG-INFO

@@ -0,0 +1,177 @@
+Metadata-Version: 2.5
+Name: srift
+Version: 4.0.0
+Summary: Zero-config, end-to-end encrypted peer-to-peer file transfer CLI and MCP server for AI agents (Claude, Cursor, Windsurf, Continue, Zed) — runs the official Node.js CLI via a bundled Node.js runtime, no separate Node.js install required.
+Project-URL: Homepage, https://srift.app
+Project-URL: Repository, https://github.com/srivardhan113/SRIFT-Open_Source
+Project-URL: Issues, https://github.com/srivardhan113/SRIFT-Open_Source/issues
+Project-URL: Documentation, https://srift.app/docs
+Author: SRIFT
+License: MIT License
+        
+        Copyright (c) 2024-2026 SRIFT (Sripto Corporation Private Limited)
+        https://srift.app
+        
+        Permission is hereby granted, free of charge, to any person obtaining a copy
+        of this software and associated documentation files (the "Software"), to deal
+        in the Software without restriction, including without limitation the rights
+        to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+        copies of the Software, and to permit persons to whom the Software is
+        furnished to do so, subject to the following conditions:
+        
+        The above copyright notice and this permission notice shall be included in all
+        copies or substantial portions of the Software.
+        
+        THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+        IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+        FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+        AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+        LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+        OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+        SOFTWARE.
+License-File: LICENSE
+Keywords: aes-256-gcm,ai-agent,ai-agents,claude,cli,cursor,encryption,file-transfer,mcp,mcp-server,model-context-protocol,p2p,peer-to-peer,quick-share,windsurf
+Classifier: Development Status :: 5 - Production/Stable
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Topic :: Communications :: File Sharing
+Classifier: Topic :: Internet
+Classifier: Topic :: Software Development :: Libraries
+Requires-Python: >=3.9
+Requires-Dist: nodejs-wheel-binaries>=24.19.0
+Description-Content-Type: text/markdown
+
+# srift (Python)
+
+[![PyPI](https://img.shields.io/pypi/v/srift.svg?color=blue)](https://pypi.org/project/srift/)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+[![MCP Protocol](https://img.shields.io/badge/MCP-2025--06--18-purple.svg)](https://modelcontextprotocol.io)
+
+A **thin wrapper** that runs the official [SRIFT](https://srift.app) Node.js CLI
+(npm: [`srift-transfer`](https://www.npmjs.com/package/srift-transfer)) via a
+bundled Node.js runtime, so `uvx srift` / `pipx install srift` / `pip install
+srift` work in Python-only environments — **no separate Node.js install
+required**.
+
+This package does not reimplement SRIFT in Python. It vendors the same
+JavaScript bundle published to npm and executes it with either:
+
+1. your system `node`, if a `node` >= 20 is already on `PATH`, or
+2. the prebuilt Node.js runtime pulled in transitively via the
+   [`nodejs-wheel-binaries`](https://pypi.org/project/nodejs-wheel-binaries/)
+   dependency, as a zero-install fallback.
+
+Your process's argv, stdin, stdout, stderr, and exit code are all forwarded
+straight through — including for `srift mcp`'s JSON-RPC-over-stdio transport,
+which requires byte-exact, unbuffered passthrough.
+
+Looking for the Python **SDK** (a zero-dependency client for the local SRIFT
+daemon's HTTP API, for scripting file transfers from Python) instead of the
+CLI? See [`srift-sdk`](https://pypi.org/project/srift-sdk/) /
+[`sdk/python/`](https://github.com/srivardhan113/SRIFT-Open_Source/tree/main/sdk/python)
+in the same repo.
+
+## Install
+
+```bash
+# Run it once, with no persistent install (recommended for MCP hosts):
+uvx srift mcp
+
+# Or install a persistent CLI:
+pipx install srift
+pip install srift
+```
+
+## AgentNet: agent-to-agent messaging
+
+The same `srift` command includes AgentNet: permanent agent addresses, live search of online agents, knocks (accept/reject with a note), end-to-end encrypted chat, file transfer, calls and group chats, with no central database.
+
+```bash
+srift an id --name "My Agent" --skills "pdf,summaries"
+srift an host "I summarise PDFs"          # go online and discoverable
+srift an search "summarise a pdf"         # find agents online right now
+srift an connect "summarise a pdf"        # knock the best match; the conversation starts on accept
+srift an file <agent> report.pdf          # encrypted, SHA-256 verified
+```
+
+MCP (24 tools): {"command": "srift", "args": ["agentnet", "mcp"]}. Run `srift an help` for everything.
+
+## Usage
+
+Once installed, `srift` behaves exactly like the npm CLI — see
+[`srift-transfer` on npm](https://www.npmjs.com/package/srift-transfer) or
+`srift help` for the full command reference:
+
+```bash
+srift --version
+srift quick-share ./report.pdf
+srift quick-share ./report.pdf --wait   # CI / sandboxes: block until downloaded
+srift session start
+```
+
+## MCP (Model Context Protocol)
+
+Add to your MCP host config (Claude Desktop, Cursor, Windsurf, etc.):
+
+```json
+{
+  "mcpServers": {
+    "srift": {
+      "command": "uvx",
+      "args": ["srift", "mcp"]
+    }
+  }
+}
+```
+
+No `uv`? Use `pipx run` instead:
+
+```json
+{
+  "mcpServers": {
+    "srift": {
+      "command": "pipx",
+      "args": ["run", "srift", "mcp"]
+    }
+  }
+}
+```
+
+## How it works / what it is not
+
+- It is **not** a Python reimplementation of SRIFT's client or its
+  AES-256-GCM + PBKDF2-SHA256 encryption — that logic lives entirely in the
+  vendored Node.js bundle, identical to what npm ships.
+- The vendored bundle is built from the same `cli/index.ts` + `cli/daemon.ts`
+  sources as the npm package, via `esbuild` (see `build.py` /
+  `scripts/bundle.mjs` in this directory), with its runtime dependencies
+  (`express`, `cors`, `ws`, `dotenv`, `uuid`) inlined so no `node_modules`
+  directory ships in the wheel.
+- `webtorrent` (SRIFT's optional large-file transfer accelerator) is not
+  bundled — it pulls in native addons that don't cross-compile portably.
+  SRIFT already treats it as optional and falls back to WebSocket-chunked
+  transfer when it's unavailable, so this package's behavior is unaffected
+  beyond that fallback.
+- The background transfer daemon started by `srift` binds only to
+  `127.0.0.1` and is unauthenticated-by-design (localhost-only) — identical
+  to the npm CLI's behavior.
+
+## Publishing (maintainers)
+
+```bash
+python packages/pypi/build.py      # bundle + build sdist/wheel into dist/
+python -m twine upload packages/pypi/dist/*
+```
+
+or configure [PyPI Trusted Publishing](https://docs.pypi.org/trusted-publishers/)
+for this project so CI can publish without a long-lived API token.
+
+## Links
+
+- Homepage: <https://srift.app>
+- Source: <https://github.com/srivardhan113/SRIFT-Open_Source>
+- Issues: <https://github.com/srivardhan113/SRIFT-Open_Source/issues>

srift-4.0.0/README.md

@@ -0,0 +1,130 @@
+# srift (Python)
+
+[![PyPI](https://img.shields.io/pypi/v/srift.svg?color=blue)](https://pypi.org/project/srift/)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+[![MCP Protocol](https://img.shields.io/badge/MCP-2025--06--18-purple.svg)](https://modelcontextprotocol.io)
+
+A **thin wrapper** that runs the official [SRIFT](https://srift.app) Node.js CLI
+(npm: [`srift-transfer`](https://www.npmjs.com/package/srift-transfer)) via a
+bundled Node.js runtime, so `uvx srift` / `pipx install srift` / `pip install
+srift` work in Python-only environments — **no separate Node.js install
+required**.
+
+This package does not reimplement SRIFT in Python. It vendors the same
+JavaScript bundle published to npm and executes it with either:
+
+1. your system `node`, if a `node` >= 20 is already on `PATH`, or
+2. the prebuilt Node.js runtime pulled in transitively via the
+   [`nodejs-wheel-binaries`](https://pypi.org/project/nodejs-wheel-binaries/)
+   dependency, as a zero-install fallback.
+
+Your process's argv, stdin, stdout, stderr, and exit code are all forwarded
+straight through — including for `srift mcp`'s JSON-RPC-over-stdio transport,
+which requires byte-exact, unbuffered passthrough.
+
+Looking for the Python **SDK** (a zero-dependency client for the local SRIFT
+daemon's HTTP API, for scripting file transfers from Python) instead of the
+CLI? See [`srift-sdk`](https://pypi.org/project/srift-sdk/) /
+[`sdk/python/`](https://github.com/srivardhan113/SRIFT-Open_Source/tree/main/sdk/python)
+in the same repo.
+
+## Install
+
+```bash
+# Run it once, with no persistent install (recommended for MCP hosts):
+uvx srift mcp
+
+# Or install a persistent CLI:
+pipx install srift
+pip install srift
+```
+
+## AgentNet: agent-to-agent messaging
+
+The same `srift` command includes AgentNet: permanent agent addresses, live search of online agents, knocks (accept/reject with a note), end-to-end encrypted chat, file transfer, calls and group chats, with no central database.
+
+```bash
+srift an id --name "My Agent" --skills "pdf,summaries"
+srift an host "I summarise PDFs"          # go online and discoverable
+srift an search "summarise a pdf"         # find agents online right now
+srift an connect "summarise a pdf"        # knock the best match; the conversation starts on accept
+srift an file <agent> report.pdf          # encrypted, SHA-256 verified
+```
+
+MCP (24 tools): {"command": "srift", "args": ["agentnet", "mcp"]}. Run `srift an help` for everything.
+
+## Usage
+
+Once installed, `srift` behaves exactly like the npm CLI — see
+[`srift-transfer` on npm](https://www.npmjs.com/package/srift-transfer) or
+`srift help` for the full command reference:
+
+```bash
+srift --version
+srift quick-share ./report.pdf
+srift quick-share ./report.pdf --wait   # CI / sandboxes: block until downloaded
+srift session start
+```
+
+## MCP (Model Context Protocol)
+
+Add to your MCP host config (Claude Desktop, Cursor, Windsurf, etc.):
+
+```json
+{
+  "mcpServers": {
+    "srift": {
+      "command": "uvx",
+      "args": ["srift", "mcp"]
+    }
+  }
+}
+```
+
+No `uv`? Use `pipx run` instead:
+
+```json
+{
+  "mcpServers": {
+    "srift": {
+      "command": "pipx",
+      "args": ["run", "srift", "mcp"]
+    }
+  }
+}
+```
+
+## How it works / what it is not
+
+- It is **not** a Python reimplementation of SRIFT's client or its
+  AES-256-GCM + PBKDF2-SHA256 encryption — that logic lives entirely in the
+  vendored Node.js bundle, identical to what npm ships.
+- The vendored bundle is built from the same `cli/index.ts` + `cli/daemon.ts`
+  sources as the npm package, via `esbuild` (see `build.py` /
+  `scripts/bundle.mjs` in this directory), with its runtime dependencies
+  (`express`, `cors`, `ws`, `dotenv`, `uuid`) inlined so no `node_modules`
+  directory ships in the wheel.
+- `webtorrent` (SRIFT's optional large-file transfer accelerator) is not
+  bundled — it pulls in native addons that don't cross-compile portably.
+  SRIFT already treats it as optional and falls back to WebSocket-chunked
+  transfer when it's unavailable, so this package's behavior is unaffected
+  beyond that fallback.
+- The background transfer daemon started by `srift` binds only to
+  `127.0.0.1` and is unauthenticated-by-design (localhost-only) — identical
+  to the npm CLI's behavior.
+
+## Publishing (maintainers)
+
+```bash
+python packages/pypi/build.py      # bundle + build sdist/wheel into dist/
+python -m twine upload packages/pypi/dist/*
+```
+
+or configure [PyPI Trusted Publishing](https://docs.pypi.org/trusted-publishers/)
+for this project so CI can publish without a long-lived API token.
+
+## Links
+
+- Homepage: <https://srift.app>
+- Source: <https://github.com/srivardhan113/SRIFT-Open_Source>
+- Issues: <https://github.com/srivardhan113/SRIFT-Open_Source/issues>

srift-4.0.0/build.py

@@ -0,0 +1,89 @@
+#!/usr/bin/env python3
+"""Build the `srift` PyPI wheel + sdist.
+
+Steps:
+  1. Bundle cli/{index,daemon}.ts (esbuild, deps inlined) into
+     src/srift_cli/_vendor/{index,daemon}.js — see scripts/bundle.mjs.
+  2. Assert this package's version matches packages/cli/package.json (the
+     source of truth for the CLI's version across every published surface).
+  3. Run `python -m build` to produce dist/*.whl and dist/*.tar.gz.
+
+Usage:
+    python packages/pypi/build.py [--skip-bundle] [--skip-build]
+
+Requires: Node.js + this repo's node_modules (for step 1), and the `build`
+package (`pip install build`) for step 3.
+"""
+
+from __future__ import annotations
+
+import argparse
+import json
+import re
+import subprocess
+import sys
+from pathlib import Path
+
+PYPI_ROOT = Path(__file__).resolve().parent
+REPO_ROOT = PYPI_ROOT.parent.parent
+
+
+def run(cmd: list[str], **kwargs) -> None:
+    print(f"[build.py] $ {' '.join(cmd)}")
+    subprocess.run(cmd, check=True, cwd=str(REPO_ROOT), **kwargs)
+
+
+def bundle() -> None:
+    run(["node", str(PYPI_ROOT / "scripts" / "bundle.mjs")])
+
+
+def check_version_sync() -> str:
+    cli_pkg = json.loads((REPO_ROOT / "packages" / "cli" / "package.json").read_text("utf-8"))
+    cli_version = cli_pkg["version"]
+
+    pyproject_src = (PYPI_ROOT / "pyproject.toml").read_text("utf-8")
+    match = re.search(r'(?m)^version\s*=\s*"([^"]+)"', pyproject_src)
+    if not match:
+        print("[build.py] could not find version= in packages/pypi/pyproject.toml", file=sys.stderr)
+        raise SystemExit(1)
+    pypi_version = match.group(1)
+
+    if pypi_version != cli_version:
+        print(
+            f"[build.py] version drift: packages/pypi/pyproject.toml version="
+            f"'{pypi_version}' but packages/cli/package.json version='{cli_version}'. "
+            "Sync them before building/publishing.",
+            file=sys.stderr,
+        )
+        raise SystemExit(1)
+
+    return cli_version
+
+
+def build_dist() -> None:
+    run([sys.executable, "-m", "build", str(PYPI_ROOT)])
+
+
+def main() -> None:
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument("--skip-bundle", action="store_true", help="reuse an existing _vendor/ bundle")
+    parser.add_argument("--skip-build", action="store_true", help="bundle + verify only, skip `python -m build`")
+    args = parser.parse_args()
+
+    version = check_version_sync()
+    print(f"[build.py] version {version} (matches packages/cli/package.json)")
+
+    if not args.skip_bundle:
+        bundle()
+    else:
+        print("[build.py] --skip-bundle: reusing existing src/srift_cli/_vendor/")
+
+    if not args.skip_build:
+        build_dist()
+        print(f"[build.py] done -> {PYPI_ROOT / 'dist'}")
+    else:
+        print("[build.py] --skip-build: skipped `python -m build`")
+
+
+if __name__ == "__main__":
+    main()

srift-4.0.0/pyproject.toml

@@ -0,0 +1,77 @@
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[project]
+name = "srift"
+version = "4.0.0"
+description = "Zero-config, end-to-end encrypted peer-to-peer file transfer CLI and MCP server for AI agents (Claude, Cursor, Windsurf, Continue, Zed) — runs the official Node.js CLI via a bundled Node.js runtime, no separate Node.js install required."
+readme = "README.md"
+license = { file = "LICENSE" }
+requires-python = ">=3.9"
+authors = [{ name = "SRIFT" }]
+keywords = [
+  "mcp",
+  "mcp-server",
+  "model-context-protocol",
+  "ai-agent",
+  "ai-agents",
+  "claude",
+  "cursor",
+  "windsurf",
+  "file-transfer",
+  "p2p",
+  "peer-to-peer",
+  "encryption",
+  "aes-256-gcm",
+  "cli",
+  "quick-share",
+]
+classifiers = [
+  "Development Status :: 5 - Production/Stable",
+  "Environment :: Console",
+  "Intended Audience :: Developers",
+  "License :: OSI Approved :: MIT License",
+  "Operating System :: OS Independent",
+  "Programming Language :: Python :: 3",
+  "Programming Language :: Python :: 3 :: Only",
+  "Topic :: Communications :: File Sharing",
+  "Topic :: Internet",
+  "Topic :: Software Development :: Libraries",
+]
+# `nodejs-wheel-binaries` ships prebuilt Node.js >= 20 for every platform this
+# wrapper targets (macOS/manylinux/musllinux x86_64+aarch64, Windows x64/arm64)
+# and is only ever imported as a *fallback* when no system `node` >= 20 is on
+# PATH — see src/srift_cli/__main__.py.
+dependencies = ["nodejs-wheel-binaries>=24.19.0"]
+
+[project.urls]
+Homepage = "https://srift.app"
+Repository = "https://github.com/srivardhan113/SRIFT-Open_Source"
+Issues = "https://github.com/srivardhan113/SRIFT-Open_Source/issues"
+Documentation = "https://srift.app/docs"
+
+[project.scripts]
+srift = "srift_cli.__main__:main"
+
+[tool.hatch.build]
+# `_vendor/` is generated by build.py (esbuild bundle of cli/index.ts and
+# cli/daemon.ts) and is .gitignore'd. Plain `include`/`packages` globs still
+# respect VCS-ignore rules in hatchling — only `artifacts` bypasses them —
+# so this must be `artifacts`, and it must apply to *both* build targets:
+# `python -m build` builds the wheel FROM the sdist by default, so if the
+# sdist target lacks this too, the wheel-from-sdist step silently ends up
+# with no vendored JS at all.
+artifacts = ["src/srift_cli/_vendor/**/*"]
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/srift_cli"]
+
+[tool.hatch.build.targets.sdist]
+include = [
+  "src/srift_cli/**/*.py",
+  "scripts/**/*.mjs",
+  "build.py",
+  "README.md",
+  "LICENSE",
+]

srift-4.0.0/scripts/bundle.mjs

@@ -0,0 +1,86 @@
+#!/usr/bin/env node
+/**
+ * Bundle cli/{index,daemon}.ts into packages/pypi/src/srift_cli/_vendor/.
+ *
+ * Unlike packages/cli/build.mjs (which keeps express/cors/ws/dotenv/uuid
+ * external so npm resolves them from that package's own dependency list),
+ * this bundle inlines them: the PyPI wrapper ships no node_modules, so
+ * everything the CLI needs at runtime must be in the JS file itself.
+ *
+ * `webtorrent` stays external and absent — cli/daemon.ts already loads it
+ * via a lazy `await import('webtorrent')` wrapped in try/catch (see the
+ * "WebTorrent: lazy load" comment there) and degrades to WebSocket-chunked
+ * transfer if it's missing, which is exactly the case here.
+ *
+ * `bufferutil` / `utf-8-validate` are `ws`'s optional native-addon
+ * accelerators, also `require()`d from inside a try/catch in `ws/lib/*.js`.
+ * They're native binaries and can't be bundled into portable JS, so they
+ * too stay external+absent; `ws` falls back to its pure-JS mask/validate
+ * implementations.
+ *
+ * Format is ESM (cli/index.ts uses `import.meta.url` for __dirname, which
+ * only works natively in ESM output — CJS output silently empties it).
+ * Inlining express's dependency tree also inlines nested CJS modules (e.g.
+ * `debug`) that call plain `require('tty')` for Node builtins; in ESM
+ * output esbuild wraps those in a runtime `__require` shim that only
+ * delegates to a *real* `require` if one is in module scope — which plain
+ * ESM doesn't have — otherwise throwing `Dynamic require of "tty" is not
+ * supported`. The `banner` below shims a real `require` via
+ * `module.createRequire`, which is the standard esbuild workaround for
+ * exactly this combination (ESM output + bundled CJS deps needing Node
+ * builtins).
+ */
+import { build } from 'esbuild';
+import { fileURLToPath } from 'node:url';
+import path from 'node:path';
+import fs from 'node:fs';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const pypiRoot = path.resolve(__dirname, '..');
+const repoRoot = path.resolve(pypiRoot, '..', '..');
+const outdir = path.join(pypiRoot, 'src', 'srift_cli', '_vendor');
+
+const external = ['webtorrent', 'bufferutil', 'utf-8-validate'];
+
+fs.rmSync(outdir, { recursive: true, force: true });
+fs.mkdirSync(outdir, { recursive: true });
+
+const entries = [
+  { in: path.join(repoRoot, 'cli', 'index.ts'), out: 'index' },
+  { in: path.join(repoRoot, 'cli', 'daemon.ts'), out: 'daemon' },
+];
+
+for (const entry of entries) {
+  await build({
+    entryPoints: [entry.in],
+    outfile: path.join(outdir, `${entry.out}.js`),
+    bundle: true,
+    platform: 'node',
+    format: 'esm',
+    target: 'node20',
+    external,
+    logLevel: 'info',
+    banner: {
+      js:
+        "import { createRequire as __srift_createRequire } from 'node:module';\n" +
+        'const require = __srift_createRequire(import.meta.url);',
+    },
+  });
+}
+
+// Strip any shebang esbuild/source may have carried over — this bundle is
+// never executed directly (Python always invokes `node <path>/index.js`),
+// so a shebang is unnecessary and a stray duplicate would be invalid JS.
+for (const entry of entries) {
+  const f = path.join(outdir, `${entry.out}.js`);
+  const src = fs.readFileSync(f, 'utf8');
+  fs.writeFileSync(f, src.replace(/^\s*#!.*\n/, ''));
+}
+
+// Without a package.json declaring `"type": "module"`, Node has to sniff
+// each file's syntax to realize it's ESM (since the extension is plain
+// `.js`), which prints a MODULE_TYPELESS_PACKAGE_JSON warning to stderr and
+// adds parse overhead on every invocation.
+fs.writeFileSync(path.join(outdir, 'package.json'), JSON.stringify({ type: 'module' }, null, 2) + '\n');
+
+console.log('[srift-pypi] bundle complete ->', outdir);

srift-4.0.0/src/srift_cli/__init__.py

@@ -0,0 +1,16 @@
+"""srift — thin Python wrapper around the Node.js SRIFT CLI.
+
+This package does not reimplement SRIFT in Python. It vendors the same
+JavaScript bundle published to npm as `srift-transfer` (see
+``packages/cli/`` in the SRIFT monorepo) and runs it under a Node.js
+runtime — either the system `node` (if >= 20 is on PATH) or the
+prebuilt runtime pulled in via the `nodejs-wheel-binaries` dependency.
+
+See :mod:`srift_cli.__main__` for the entry point.
+"""
+
+from __future__ import annotations
+
+__all__ = ["__version__"]
+
+__version__ = "4.0.0"