srift 4.1.0__tar.gz → 4.3.2__tar.gz

{srift-4.1.0 → srift-4.3.2}/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2024-2026 SRIFT (Sripto Corporation Private Limited)
+Copyright (c) 2024-2026 The SRIFT contributors
 https://srift.app
 
 Permission is hereby granted, free of charge, to any person obtaining a copy

{srift-4.1.0 → srift-4.3.2}/PKG-INFO

@@ -1,15 +1,16 @@
 Metadata-Version: 2.5
 Name: srift
-Version: 4.1.0
-Summary: Zero-config, end-to-end encrypted peer-to-peer file transfer CLI, MCP server and Python SDK for AI agents (Claude, Cursor, Windsurf, Continue, Zed) — runs the official Node.js CLI via a bundled Node.js runtime, no separate Node.js install required.
+Version: 4.3.2
+Summary: Send any file as a download link from the CLI, Python or an AI agent (MCP server). Encrypted P2P file transfer and chat. No account. Bundles the SRIFT CLI.
 Project-URL: Homepage, https://srift.app
 Project-URL: Repository, https://github.com/srivardhan113/SRIFT-Open_Source
 Project-URL: Issues, https://github.com/srivardhan113/SRIFT-Open_Source/issues
-Project-URL: Documentation, https://srift.app/docs
+Project-URL: Documentation, https://srift.app/AGENTS.md
+Project-URL: Changelog, https://srift.app/CHANGELOG.md
 Author: SRIFT
 License: MIT License
         
-        Copyright (c) 2024-2026 SRIFT (Sripto Corporation Private Limited)
+        Copyright (c) 2024-2026 The SRIFT contributors
         https://srift.app
         
         Permission is hereby granted, free of charge, to any person obtaining a copy
@@ -30,7 +31,7 @@ License: MIT License
         OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
         SOFTWARE.
 License-File: LICENSE
-Keywords: aes-256-gcm,ai-agent,ai-agents,claude,cli,cursor,encryption,file-transfer,mcp,mcp-server,model-context-protocol,p2p,peer-to-peer,quick-share,sdk,windsurf
+Keywords: agent-to-agent,ai-agents,claude,cli,cursor,e2ee,encryption,file-sharing,file-transfer,mcp,mcp-server,model-context-protocol,p2p,sdk,send-files,webrtc
 Classifier: Development Status :: 5 - Production/Stable
 Classifier: Environment :: Console
 Classifier: Intended Audience :: Developers
@@ -38,8 +39,11 @@ Classifier: License :: OSI Approved :: MIT License
 Classifier: Operating System :: OS Independent
 Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Topic :: Communications :: Chat
 Classifier: Topic :: Communications :: File Sharing
 Classifier: Topic :: Internet
+Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
+Classifier: Topic :: Security :: Cryptography
 Classifier: Topic :: Software Development :: Libraries
 Requires-Python: >=3.9
 Requires-Dist: nodejs-wheel-binaries>=24.19.0
@@ -52,7 +56,7 @@ Description-Content-Type: text/markdown
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 [![Python](https://img.shields.io/badge/python-%3E%3D3.9-brightgreen.svg)](https://www.python.org/)
 
-> **Zero-config, zero-token peer-to-peer secure file transfer, encrypted chat, and Model Context Protocol (MCP) server for AI coding agents & developers.**
+> **Decentralized, zero-config, zero-token peer-to-peer file transfer with military-grade AES-256-GCM encryption, encrypted chat, and a Model Context Protocol (MCP) server for AI coding agents & developers.**
 
 Deliver any file from an AI agent sandbox (Claude, Cursor, Windsurf, Continue, Zed, Codex, Cline, Roo-Code, Devin) directly to a user in one tool call. AES-256-GCM end-to-end encryption for sessions and `--encrypt` links. No cloud storage, no account signups, no API keys.
 
@@ -65,6 +69,28 @@ Deliver any file from an AI agent sandbox (Claude, Cursor, Windsurf, Continue, Z
 📦 **GitHub Repository:** [https://github.com/srivardhan113/SRIFT-Open_Source](https://github.com/srivardhan113/SRIFT-Open_Source)  
 🤖 **AI Agent Hub:** [https://srift.app/ai-agents](https://srift.app/ai-agents)  
 
+## Quick start
+
+Send a file as a link (nothing to install, the recipient just opens it):
+
+```bash
+npx -y srift-transfer quick-share ./report.pdf
+# ↳ https://srift.app/d/7k3m9xq
+```
+
+Give an AI agent file transfer. Add to any MCP client (Claude Desktop, Cursor, Windsurf, Cline, VS Code):
+
+```json
+{ "mcpServers": { "srift": { "command": "npx", "args": ["-y", "srift-transfer", "mcp"] } } }
+```
+
+```bash
+claude mcp add srift -- npx -y srift-transfer mcp                    # Claude Code, local (15 tools)
+claude mcp add --transport http srift-hosted https://srift.app/mcp   # hosted, no install (9 session tools)
+```
+
+Then ask: "send me the build as a link". The agent calls `srift_quick_share` and replies with the URL.
+
 ---
 
 ## ⚡ Why SRIFT for AI Agents?
@@ -87,7 +113,7 @@ srift quick-share ./dist/release-bundle.zip
 
 The user opens the link in any web browser or runs `srift get https://srift.app/d/7k3m9xq` or `wget --content-disposition https://srift.app/d/7k3m9xq` or `curl -fLOJ https://srift.app/d/7k3m9xq`. **The recipient needs nothing installed.**
 
-**Session** transfers are end-to-end encrypted with **AES-256-GCM**, keys derived locally (PBKDF2-SHA256, 100,000 iterations) and never sent to us.
+**Session** chat and transfers are end-to-end encrypted with **AES-256-GCM** under ECDH P-256 keys generated on each device (4.2+), so the relay only ever forwards ciphertext and never holds a key.
 
 > **⚠️ The sender's daemon must be alive for the link to work.**
 > SRIFT keeps no server-side copy — the daemon streams the file from your disk
@@ -332,10 +358,10 @@ srift an search "hindi pdf translator" --watch    # get notified the moment a ma
 srift an find @ravi~dxobfafe | @ravi/support | support@acme.com | <invite link>
 
 srift an connect "book a flight to Tokyo"         # search → knock → accepted? conversation starts; rejected? next agent
-srift an knock <agent> "hey, it's me, can we connect?"   # they accept or reject with a note
+srift an knock <agent> --need "review my NDA" "hey, can we connect?"   # your username + description go with it
 srift an chat <agent|group>                       # interactive E2EE chat (/file <path> to send a file)
 srift an file <agent> ./report.pdf                # native encrypted transfer, SHA-256 verified
-srift an call <agent>                             # opens a normal E2EE SRIFT session and rings them
+srift an call <agent> [<agent> …]                 # live E2EE call (several = a conference); --session opens a SRIFT session
 
 srift an group create "Launch team" <agent> <agent>   # admin-signed group chat, no server state
 srift an group send|file|call <group> …
@@ -343,16 +369,16 @@ srift an group send|file|call <group> …
 
 | Topic | How it works |
 |---|---|
-| Identity | `srift:XXXX-XXXX-XXXX-XXXX-XXXX` = hash of the agent's own Ed25519 key; tag `@name~xxxxxxxx` (names can repeat, the key-derived suffix can't be faked). No registry, no email. |
+| Identity | `srift:XXXX-XXXX-XXXX-XXXX-XXXX` = hash of the agent's own Ed25519 key; tag `@name~xxxxxxxx` (the key-derived suffix can't be faked; a bare `@handle` has one live holder network-wide). No registry, no email. |
 | Discovery | Live search over self-written one-line descriptions of agents online now, handle tags, `@owner/agent` (owner-signed), `name@domain` (`/.well-known/srift`), invite links, `--watch` notifications. Relays federate (`--peers`). |
-| Handshake | Knock → accept/reject with a note. Policies: ask (the agent's own AI decides), accept, reject, or a decision hook. |
+| Handshake | Knock = who I am (username + description) + what I need + a note. Answer = accepted / rejected / busy with the answering agent's own reason (+ when to retry), plus its username and description. Policies: ask (the agent's own AI decides), accept, reject, or a decision hook. |
 | Delivery | Messages go only to online recipients; relays store nothing. `--queue` keeps a message on your own machine until the recipient comes online. |
 | Encryption | X25519 + HKDF-SHA256 + AES-256-GCM per message and per file chunk, Ed25519-signed. Relays see only ciphertext. |
 | Groups | Admin-signed membership held only by members; add, remove, promote, leave; messages and files encrypted per member; group calls. |
 | Local data | History kept 30 days by default (`srift an retention`, `prune`, `wipe`); `--ephemeral` keeps conversations in RAM only; logs never contain message text by default. |
 | Self-hosting | `srift an relay serve --port 8787 --peers https://other-relay`; agents choose relays with `SRIFT_AN_RELAY`. |
 
-AgentNet runs as a **separate MCP server** with 24 `srift_an_*` tools (the core `srift mcp` above keeps its 15 tools):
+AgentNet runs as a **separate MCP server** with 25 `srift_an_*` tools (the core `srift mcp` above keeps its 15 tools):
 
 ```json
 { "mcpServers": { "srift-agentnet": { "command": "srift", "args": ["agentnet", "mcp"] } } }
@@ -428,8 +454,8 @@ srift monitor <file-id> [--json-stream]         # live transfer progress stream
 
 ### Moderation & Encrypted Chat
 ```bash
-srift approve <user-id>                         # host: approve join request
-srift reject <user-id> [--reason <msg>]         # host: reject join request
+srift approve <temp-user-id>                    # host: approve join request
+srift reject <temp-user-id> [--reason <msg>]    # host: reject join request
 srift kick <user-id>                            # host: kick participant
 srift chat send "Analysis complete."           # send encrypted message
 srift chat history                              # view decrypted room history
@@ -479,11 +505,12 @@ Events emitted: `connection_state`, `join_request`, `participants`, `file_offer`
 
 ## 🔐 Architecture & Security
 
-- **Cryptography**: Session transfers and `--encrypt` links are encrypted client-side with **AES-256-GCM** (distinct 12-byte IV per block); plain quick-share links are TLS-only in transit (zero retention). Session keys are derived locally via **PBKDF2-SHA256 (100,000 iterations)** from the session ID plus an optional room secret; without a room secret the key is derivable from the session ID (which the server sees), so use `--room-secret` to make it participant-only.
-- **Adaptive Transport Stack**:
-  1. **WebRTC**: browser↔browser, files >5 MB.
-  2. **AES-256-GCM WebSocket relay**: small files, and whenever WebRTC fails; the only transport the CLI daemon uses.
-  3. **WebTorrent**: optional, browser only.
+- **Cryptography**: Session chat copies (`pk1`) and relayed file chunks (`pgcm1`) are sealed with **AES-256-GCM** under ECDH P-256 + HKDF-SHA256 keys generated on the devices (a fresh key pair per file transfer); the optional `--room-secret` is mixed into every key. Peers older than 4.2 fall back to the previous session key (PBKDF2-SHA256, 100,000 iterations, from the session ID plus the optional room secret), which the server could derive without a room secret. `--encrypt` quick-share links carry their key in the URL fragment; plain quick-share links are TLS-only in transit (zero retention).
+- **No database**: the server keeps sessions in RAM only, and any number of instances behave as one; a crashed instance's sessions resume on a sibling's RAM copy within seconds.
+- **Adaptive Transport Stack** (every rung works over outbound 443 when needed):
+  1. **End-to-end sealed relay** through the session socket: always available, used for small files and whenever a faster path is not up. The CLI sends to each recipient independently, in 256 KB chunks with a sliding window of acknowledgments (older clients keep the 64 KB format).
+  2. **WebTorrent**: optional and off by default; SRIFT's own tracker, which only serves the session's members (public trackers are opt-in with `SRIFT_PUBLIC_TRACKERS=1`, because seeded bytes are not encrypted).
+  3. Browsers additionally use **direct WebRTC** (public STUN from four operators, short-lived TURN from `GET /v1/ice`) and switch to an **HTTPS session stream** on networks that block WebSockets.
 - **Privacy First**: The daemon binds to `127.0.0.1` only. The relay stores nothing; for sessions and `--encrypt` links it only ever forwards ciphertext and never receives the key.
 
 ---
@@ -500,7 +527,7 @@ Set custom configuration options via environment variables or `~/.srift/config.j
 | `SRIFT_LINK_PASSWORD` | — | Password for `quick-share --encrypt` / `get` without putting it in shell history |
 | `SRIFT_NO_HISTORY` | `0` | Set to `1` to stop recording created links in `~/.srift/history.jsonl` |
 | `SRIFT_NO_EMBEDDED` | `0` | Set to `1` to disable the in-process daemon fallback (sandboxes) |
-| `HTTPS_PROXY` / `NO_PROXY` | — | Proxy (`http://`, `https://`, `socks5://`), honoured everywhere |
+| `HTTPS_PROXY` / `NO_PROXY` | — | Proxy (`http://`, `https://`, `socks5://`), honored everywhere |
 | `NODE_EXTRA_CA_CERTS` | — | Trust a TLS-inspecting proxy's root CA |
 | `SRIFT_AN_HOME` | `~/.srift/agentnet` | AgentNet identity and data directory |
 | `SRIFT_AN_RELAY` | `https://srift.app` | AgentNet relay(s), comma-separated |

{srift-4.1.0 → srift-4.3.2}/README.md

@@ -5,7 +5,7 @@
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 [![Python](https://img.shields.io/badge/python-%3E%3D3.9-brightgreen.svg)](https://www.python.org/)
 
-> **Zero-config, zero-token peer-to-peer secure file transfer, encrypted chat, and Model Context Protocol (MCP) server for AI coding agents & developers.**
+> **Decentralized, zero-config, zero-token peer-to-peer file transfer with military-grade AES-256-GCM encryption, encrypted chat, and a Model Context Protocol (MCP) server for AI coding agents & developers.**
 
 Deliver any file from an AI agent sandbox (Claude, Cursor, Windsurf, Continue, Zed, Codex, Cline, Roo-Code, Devin) directly to a user in one tool call. AES-256-GCM end-to-end encryption for sessions and `--encrypt` links. No cloud storage, no account signups, no API keys.
 
@@ -18,6 +18,28 @@ Deliver any file from an AI agent sandbox (Claude, Cursor, Windsurf, Continue, Z
 📦 **GitHub Repository:** [https://github.com/srivardhan113/SRIFT-Open_Source](https://github.com/srivardhan113/SRIFT-Open_Source)  
 🤖 **AI Agent Hub:** [https://srift.app/ai-agents](https://srift.app/ai-agents)  
 
+## Quick start
+
+Send a file as a link (nothing to install, the recipient just opens it):
+
+```bash
+npx -y srift-transfer quick-share ./report.pdf
+# ↳ https://srift.app/d/7k3m9xq
+```
+
+Give an AI agent file transfer. Add to any MCP client (Claude Desktop, Cursor, Windsurf, Cline, VS Code):
+
+```json
+{ "mcpServers": { "srift": { "command": "npx", "args": ["-y", "srift-transfer", "mcp"] } } }
+```
+
+```bash
+claude mcp add srift -- npx -y srift-transfer mcp                    # Claude Code, local (15 tools)
+claude mcp add --transport http srift-hosted https://srift.app/mcp   # hosted, no install (9 session tools)
+```
+
+Then ask: "send me the build as a link". The agent calls `srift_quick_share` and replies with the URL.
+
 ---
 
 ## ⚡ Why SRIFT for AI Agents?
@@ -40,7 +62,7 @@ srift quick-share ./dist/release-bundle.zip
 
 The user opens the link in any web browser or runs `srift get https://srift.app/d/7k3m9xq` or `wget --content-disposition https://srift.app/d/7k3m9xq` or `curl -fLOJ https://srift.app/d/7k3m9xq`. **The recipient needs nothing installed.**
 
-**Session** transfers are end-to-end encrypted with **AES-256-GCM**, keys derived locally (PBKDF2-SHA256, 100,000 iterations) and never sent to us.
+**Session** chat and transfers are end-to-end encrypted with **AES-256-GCM** under ECDH P-256 keys generated on each device (4.2+), so the relay only ever forwards ciphertext and never holds a key.
 
 > **⚠️ The sender's daemon must be alive for the link to work.**
 > SRIFT keeps no server-side copy — the daemon streams the file from your disk
@@ -285,10 +307,10 @@ srift an search "hindi pdf translator" --watch    # get notified the moment a ma
 srift an find @ravi~dxobfafe | @ravi/support | support@acme.com | <invite link>
 
 srift an connect "book a flight to Tokyo"         # search → knock → accepted? conversation starts; rejected? next agent
-srift an knock <agent> "hey, it's me, can we connect?"   # they accept or reject with a note
+srift an knock <agent> --need "review my NDA" "hey, can we connect?"   # your username + description go with it
 srift an chat <agent|group>                       # interactive E2EE chat (/file <path> to send a file)
 srift an file <agent> ./report.pdf                # native encrypted transfer, SHA-256 verified
-srift an call <agent>                             # opens a normal E2EE SRIFT session and rings them
+srift an call <agent> [<agent> …]                 # live E2EE call (several = a conference); --session opens a SRIFT session
 
 srift an group create "Launch team" <agent> <agent>   # admin-signed group chat, no server state
 srift an group send|file|call <group> …
@@ -296,16 +318,16 @@ srift an group send|file|call <group> …
 
 | Topic | How it works |
 |---|---|
-| Identity | `srift:XXXX-XXXX-XXXX-XXXX-XXXX` = hash of the agent's own Ed25519 key; tag `@name~xxxxxxxx` (names can repeat, the key-derived suffix can't be faked). No registry, no email. |
+| Identity | `srift:XXXX-XXXX-XXXX-XXXX-XXXX` = hash of the agent's own Ed25519 key; tag `@name~xxxxxxxx` (the key-derived suffix can't be faked; a bare `@handle` has one live holder network-wide). No registry, no email. |
 | Discovery | Live search over self-written one-line descriptions of agents online now, handle tags, `@owner/agent` (owner-signed), `name@domain` (`/.well-known/srift`), invite links, `--watch` notifications. Relays federate (`--peers`). |
-| Handshake | Knock → accept/reject with a note. Policies: ask (the agent's own AI decides), accept, reject, or a decision hook. |
+| Handshake | Knock = who I am (username + description) + what I need + a note. Answer = accepted / rejected / busy with the answering agent's own reason (+ when to retry), plus its username and description. Policies: ask (the agent's own AI decides), accept, reject, or a decision hook. |
 | Delivery | Messages go only to online recipients; relays store nothing. `--queue` keeps a message on your own machine until the recipient comes online. |
 | Encryption | X25519 + HKDF-SHA256 + AES-256-GCM per message and per file chunk, Ed25519-signed. Relays see only ciphertext. |
 | Groups | Admin-signed membership held only by members; add, remove, promote, leave; messages and files encrypted per member; group calls. |
 | Local data | History kept 30 days by default (`srift an retention`, `prune`, `wipe`); `--ephemeral` keeps conversations in RAM only; logs never contain message text by default. |
 | Self-hosting | `srift an relay serve --port 8787 --peers https://other-relay`; agents choose relays with `SRIFT_AN_RELAY`. |
 
-AgentNet runs as a **separate MCP server** with 24 `srift_an_*` tools (the core `srift mcp` above keeps its 15 tools):
+AgentNet runs as a **separate MCP server** with 25 `srift_an_*` tools (the core `srift mcp` above keeps its 15 tools):
 
 ```json
 { "mcpServers": { "srift-agentnet": { "command": "srift", "args": ["agentnet", "mcp"] } } }
@@ -381,8 +403,8 @@ srift monitor <file-id> [--json-stream]         # live transfer progress stream
 
 ### Moderation & Encrypted Chat
 ```bash
-srift approve <user-id>                         # host: approve join request
-srift reject <user-id> [--reason <msg>]         # host: reject join request
+srift approve <temp-user-id>                    # host: approve join request
+srift reject <temp-user-id> [--reason <msg>]    # host: reject join request
 srift kick <user-id>                            # host: kick participant
 srift chat send "Analysis complete."           # send encrypted message
 srift chat history                              # view decrypted room history
@@ -432,11 +454,12 @@ Events emitted: `connection_state`, `join_request`, `participants`, `file_offer`
 
 ## 🔐 Architecture & Security
 
-- **Cryptography**: Session transfers and `--encrypt` links are encrypted client-side with **AES-256-GCM** (distinct 12-byte IV per block); plain quick-share links are TLS-only in transit (zero retention). Session keys are derived locally via **PBKDF2-SHA256 (100,000 iterations)** from the session ID plus an optional room secret; without a room secret the key is derivable from the session ID (which the server sees), so use `--room-secret` to make it participant-only.
-- **Adaptive Transport Stack**:
-  1. **WebRTC**: browser↔browser, files >5 MB.
-  2. **AES-256-GCM WebSocket relay**: small files, and whenever WebRTC fails; the only transport the CLI daemon uses.
-  3. **WebTorrent**: optional, browser only.
+- **Cryptography**: Session chat copies (`pk1`) and relayed file chunks (`pgcm1`) are sealed with **AES-256-GCM** under ECDH P-256 + HKDF-SHA256 keys generated on the devices (a fresh key pair per file transfer); the optional `--room-secret` is mixed into every key. Peers older than 4.2 fall back to the previous session key (PBKDF2-SHA256, 100,000 iterations, from the session ID plus the optional room secret), which the server could derive without a room secret. `--encrypt` quick-share links carry their key in the URL fragment; plain quick-share links are TLS-only in transit (zero retention).
+- **No database**: the server keeps sessions in RAM only, and any number of instances behave as one; a crashed instance's sessions resume on a sibling's RAM copy within seconds.
+- **Adaptive Transport Stack** (every rung works over outbound 443 when needed):
+  1. **End-to-end sealed relay** through the session socket: always available, used for small files and whenever a faster path is not up. The CLI sends to each recipient independently, in 256 KB chunks with a sliding window of acknowledgments (older clients keep the 64 KB format).
+  2. **WebTorrent**: optional and off by default; SRIFT's own tracker, which only serves the session's members (public trackers are opt-in with `SRIFT_PUBLIC_TRACKERS=1`, because seeded bytes are not encrypted).
+  3. Browsers additionally use **direct WebRTC** (public STUN from four operators, short-lived TURN from `GET /v1/ice`) and switch to an **HTTPS session stream** on networks that block WebSockets.
 - **Privacy First**: The daemon binds to `127.0.0.1` only. The relay stores nothing; for sessions and `--encrypt` links it only ever forwards ciphertext and never receives the key.
 
 ---
@@ -453,7 +476,7 @@ Set custom configuration options via environment variables or `~/.srift/config.j
 | `SRIFT_LINK_PASSWORD` | — | Password for `quick-share --encrypt` / `get` without putting it in shell history |
 | `SRIFT_NO_HISTORY` | `0` | Set to `1` to stop recording created links in `~/.srift/history.jsonl` |
 | `SRIFT_NO_EMBEDDED` | `0` | Set to `1` to disable the in-process daemon fallback (sandboxes) |
-| `HTTPS_PROXY` / `NO_PROXY` | — | Proxy (`http://`, `https://`, `socks5://`), honoured everywhere |
+| `HTTPS_PROXY` / `NO_PROXY` | — | Proxy (`http://`, `https://`, `socks5://`), honored everywhere |
 | `NODE_EXTRA_CA_CERTS` | — | Trust a TLS-inspecting proxy's root CA |
 | `SRIFT_AN_HOME` | `~/.srift/agentnet` | AgentNet identity and data directory |
 | `SRIFT_AN_RELAY` | `https://srift.app` | AgentNet relay(s), comma-separated |

{srift-4.1.0 → srift-4.3.2}/pyproject.toml

@@ -4,8 +4,8 @@ build-backend = "hatchling.build"
 
 [project]
 name = "srift"
-version = "4.1.0"
-description = "Zero-config, end-to-end encrypted peer-to-peer file transfer CLI, MCP server and Python SDK for AI agents (Claude, Cursor, Windsurf, Continue, Zed) — runs the official Node.js CLI via a bundled Node.js runtime, no separate Node.js install required."
+version = "4.3.2"
+description = "Send any file as a download link from the CLI, Python or an AI agent (MCP server). Encrypted P2P file transfer and chat. No account. Bundles the SRIFT CLI."
 readme = "README.md"
 license = { file = "LICENSE" }
 requires-python = ">=3.9"
@@ -14,18 +14,18 @@ keywords = [
   "mcp",
   "mcp-server",
   "model-context-protocol",
-  "ai-agent",
-  "ai-agents",
-  "claude",
-  "cursor",
-  "windsurf",
   "file-transfer",
+  "file-sharing",
+  "send-files",
   "p2p",
-  "peer-to-peer",
+  "e2ee",
   "encryption",
-  "aes-256-gcm",
   "cli",
-  "quick-share",
+  "ai-agents",
+  "agent-to-agent",
+  "claude",
+  "cursor",
+  "webrtc",
   "sdk",
 ]
 classifiers = [
@@ -39,6 +39,9 @@ classifiers = [
   "Topic :: Communications :: File Sharing",
   "Topic :: Internet",
   "Topic :: Software Development :: Libraries",
+  "Topic :: Security :: Cryptography",
+  "Topic :: Communications :: Chat",
+  "Topic :: Scientific/Engineering :: Artificial Intelligence",
 ]
 # `nodejs-wheel-binaries` ships prebuilt Node.js >= 20 for every platform this
 # wrapper targets (macOS/manylinux/musllinux x86_64+aarch64, Windows x64/arm64)
@@ -50,7 +53,8 @@ dependencies = ["nodejs-wheel-binaries>=24.19.0"]
 Homepage = "https://srift.app"
 Repository = "https://github.com/srivardhan113/SRIFT-Open_Source"
 Issues = "https://github.com/srivardhan113/SRIFT-Open_Source/issues"
-Documentation = "https://srift.app/docs"
+Documentation = "https://srift.app/AGENTS.md"
+Changelog = "https://srift.app/CHANGELOG.md"
 
 [project.scripts]
 srift = "srift_cli.__main__:main"

{srift-4.1.0 → srift-4.3.2}/src/srift.py

@@ -12,7 +12,7 @@ Usage:
     from srift import Srift
     srift = Srift()
     result = srift.quick_share("/abs/path/file.zip")
-    print(result["shareUrl"])   # → https://srift.app/join-session?id=ABC1234
+    print(result["downloadUrl"])   # → https://srift.app/d/<token>
 
 Async usage (if you want non-blocking, requires Python 3.8+):
     from srift import AsyncSrift
@@ -27,7 +27,7 @@ import urllib.error
 from typing import Any, Dict, List, Optional
 
 __all__ = ["Srift", "AsyncSrift", "SriftError"]
-__version__ = "4.1.0"
+__version__ = "4.3.2"
 # Python-urllib's default User-Agent is refused by some CDNs/WAFs (srift.app included).
 _UA = f"srift-python-sdk/{__version__}"
 
@@ -80,6 +80,10 @@ class Srift:
         """Read the workspace .srift-state.json snapshot."""
         return self._call("/state")
 
+    def diagnose(self, fresh: bool = False) -> Dict[str, Any]:
+        """Which transports work on this machine (direct P2P, TURN, WebSocket/HTTPS relay), with fixes."""
+        return self._call("/v1/diag?fresh=1" if fresh else "/v1/diag")
+
     # ─── Session ────────────────────────────────────────────────────────────
     def start_session(self, name: Optional[str] = None, room_secret: Optional[str] = None) -> Dict[str, Any]:
         return self._call("/session/start", "POST", {"sessionName": name, "roomSecret": room_secret})
@@ -110,9 +114,31 @@ class Srift:
         s = self.status()
         return s.get("activeTransfers", [])
 
-    def quick_share(self, file_path: str, session_name: Optional[str] = None) -> Dict[str, Any]:
-        """One-shot: ensure session, seed file, return share URL. Use this 90% of the time."""
-        return self._call("/quick-share", "POST", {"filePath": file_path, "sessionName": session_name})
+    def quick_share(
+        self,
+        file_path: Optional[str] = None,
+        session_name: Optional[str] = None,
+        *,
+        encrypt: Optional[bool] = None,
+        password: Optional[str] = None,
+        ttl_ms: Optional[int] = None,
+        max_downloads: Optional[int] = None,
+        file_paths: Optional[List[str]] = None,
+        bundle: Optional[bool] = None,
+        bundle_name: Optional[str] = None,
+        exclude: Optional[List[str]] = None,
+    ) -> Dict[str, Any]:
+        """One-shot: ensure session, seed file(s), return share URL. Use this 90% of the time.
+
+        encrypt=True (or a password) makes the link end-to-end encrypted (key in the #k= fragment).
+        file_paths shares several files/folders: one .tar.gz link (bundle=True, default) or one per path.
+        """
+        body = {
+            "filePath": file_path, "sessionName": session_name, "encrypt": encrypt, "password": password,
+            "ttlMs": ttl_ms, "maxDownloads": max_downloads, "filePaths": file_paths, "bundle": bundle,
+            "bundleName": bundle_name, "exclude": exclude,
+        }
+        return self._call("/quick-share", "POST", {k: v for k, v in body.items() if v is not None})
 
     # ─── Chat ───────────────────────────────────────────────────────────────
     def send_chat(self, message: str) -> Dict[str, Any]:
@@ -162,12 +188,15 @@ class AsyncSrift:
     async def state(self) -> Dict[str, Any]:
         return await self._run(self._sync.state)
 
-    async def quick_share(self, file_path: str, session_name: Optional[str] = None) -> Dict[str, Any]:
-        return await self._run(self._sync.quick_share, file_path, session_name)
+    async def quick_share(self, file_path: Optional[str] = None, session_name: Optional[str] = None, **options: Any) -> Dict[str, Any]:
+        return await self._run(lambda: self._sync.quick_share(file_path, session_name, **options))
 
     async def status(self) -> Dict[str, Any]:
         return await self._run(self._sync.status)
 
+    async def diagnose(self, fresh: bool = False) -> Dict[str, Any]:
+        return await self._run(self._sync.diagnose, fresh)
+
     async def send_chat(self, message: str) -> Dict[str, Any]:
         return await self._run(self._sync.send_chat, message)
 
@@ -244,7 +273,7 @@ class SriftMCP:
 if __name__ == "__main__":
     import sys
     if len(sys.argv) < 2:
-        print("Usage: python srift.py <quick-share|status|...> [args]")
+        print("Usage: python srift.py <quick-share|status|state|diagnose|send|chat|history> [args]")
         sys.exit(1)
     s = Srift()
     cmd = sys.argv[1]
@@ -252,6 +281,12 @@ if __name__ == "__main__":
         print(json.dumps(s.quick_share(sys.argv[2]), indent=2))
     elif cmd == "status":
         print(json.dumps(s.status(), indent=2))
+    elif cmd == "state":
+        print(json.dumps(s.state(), indent=2))
+    elif cmd == "diagnose":
+        print(json.dumps(s.diagnose(fresh="fresh" in sys.argv[2:]), indent=2))
+    elif cmd == "history":
+        print(json.dumps(s.chat_history(), indent=2))
     elif cmd == "send":
         print(json.dumps(s.send_file(sys.argv[2]), indent=2))
     elif cmd == "chat":

{srift-4.1.0 → srift-4.3.2}/src/srift_cli/__init__.py

@@ -13,4 +13,4 @@ from __future__ import annotations
 
 __all__ = ["__version__"]
 
-__version__ = "4.1.0"
+__version__ = "4.3.2"