shinjuku-shield 0.3.110 → 0.3.111

package/README.md

@@ -6,19 +6,19 @@ answers privately, in a terminal chat or for your agent app. Its `mcp`
 command runs a local MCP server (stdio) for your agent. Your keys never
 leave your machine.
 
-This is version 0.3.110. The npm packages `shinjuku-shield` and
+This is version 0.3.111. The npm packages `shinjuku-shield` and
 `shinjuku-shielded` hold the same files. The command is `shinjuku`.
 
 ## Set up
 
 ```sh
-npm install -g shinjuku@0.3.110
+npm install -g shinjuku@0.3.111
 shinjuku setup
 ```
 
 Type the two lines as they are. `npx install shinjuku` does not work: npx
 reads `install` as the name of another npm package. To set up without
-installing, type `npx shinjuku@0.3.110 setup`.
+installing, type `npx shinjuku@0.3.111 setup`.
 
 Setup makes the wallet on this machine, a private passphrase file, and the
 checked proof tools (about 191 MB), and writes `config.json`. It also writes
@@ -36,13 +36,13 @@ Every wallet command works after `shinjuku`, for example `shinjuku balance`,
 Claude Code:
 
 ```sh
-claude mcp add --scope user shinjuku -- npx -y --no-audit --no-fund shinjuku-shield@0.3.110 mcp
+claude mcp add --scope user shinjuku -- npx -y --no-audit --no-fund shinjuku-shield@0.3.111 mcp
 ```
 
 Claude Desktop (`claude_desktop_config.json`) or Cursor (`~/.cursor/mcp.json`):
 
 ```json
-{ "mcpServers": { "shinjuku": { "command": "npx", "args": ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.110", "mcp"] } } }
+{ "mcpServers": { "shinjuku": { "command": "npx", "args": ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.111", "mcp"] } } }
 ```
 
 On native Windows, if the host cannot find `npx`, use `"command": "cmd"` and

package/manifest.json

@@ -1,9 +1,9 @@
 {
   "schema": "carbon-shielded-wallet/bundle-manifest/v1",
   "file": "shinjuku-wallet.mjs",
-  "sha256": "f6ab1c4098bf84c9d5af4dbbcbf9aa077430dd347aa14912fbaf571741bd314a",
-  "bytes": 8332382,
-  "sourceCommit": "f296b3b0e23b608d4bac4428a0e5763ba8313414",
+  "sha256": "ca9504f8356a05d2a1fc36428f6443419e6943406d11e201d4fa2ff9d6c84814",
+  "bytes": 8333810,
+  "sourceCommit": "b7bf7b1d3617d779db6012f60c35e34f7e8363da",
   "sourceDirty": false,
   "installRecordMatchesLockfile": true,
   "releaseRule": "valid only when two fresh npm ci --ignore-scripts builds on different OSes give the same sha256; installRecordMatchesLockfile true means every entry npm installed equals its package-lock.json entry and every entry not marked optional, devOptional included, is installed: an optional entry (a package for another platform) may be absent",
@@ -1037,5 +1037,5 @@
       "version": "1.8.0"
     }
   ],
-  "publishedAt": "2026-10-27T14:09:40.228Z"
+  "publishedAt": "2026-10-27T14:51:57.097Z"
 }

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "shinjuku-shield",
-  "version": "0.3.110",
+  "version": "0.3.111",
   "mcpName": "io.github.ShinjukuStaition/shinjuku-mcp",
   "description": "Shinjuku Shielded, the private x402 facilitator on Solana: the self-custody wallet CLI and its MCP server. Shield, pay, and unshield USDC from any MCP agent, under caps you set.",
-  "shinjukuRelease": "f6ab1c40",
-  "shinjukuSha256": "f6ab1c4098bf84c9d5af4dbbcbf9aa077430dd347aa14912fbaf571741bd314a",
+  "shinjukuRelease": "ca9504f8",
+  "shinjukuSha256": "ca9504f8356a05d2a1fc36428f6443419e6943406d11e201d4fa2ff9d6c84814",
   "license": "SEE LICENSE IN LICENSE.txt",
   "author": "Shinjuku Shielded",
   "homepage": "https://github.com/ShinjukuStaition/shinjuku-shield#readme",

package/shinjuku-wallet.mjs

@@ -119461,10 +119461,11 @@ function refusalSay(a, tool, again, npmVersion) {
     if (a.refundArrived === true) return `The seller did not take it. ${yours} is back in your private balance. ${other}`;
     return `The seller did not take it; ${total2 ? `${total2} USDC` : "your money"} comes back by itself${when}. ${other}`;
   }
+  const askAgain = typeof a.newRequestId === "string" && a.newRequestId ? `To ask again, use request_id ${a.newRequestId}; it pays again.` : "A new request_id pays again.";
   if (code2 === "p03_float_receipt_pruned" && a.conversationNotKept === true) {
-    return "Paid once, not again. The wallet keeps no copy of a private conversation, so the answer cannot come back. A new request_id pays again.";
+    return `Paid once, not again: the wallet keeps no copy of a private conversation. ${askAgain}`;
   }
-  if (code2 === "p03_float_receipt_pruned") return "This request was paid more than 10 minutes ago. A new request_id pays again.";
+  if (code2 === "p03_float_receipt_pruned") return `This request was paid more than 10 minutes ago. ${askAgain}`;
   if (/^p03_(float|resource_payment)_request_(id_conflict|data_mismatch)$/.test(code2)) {
     const fresh = typeof a.newRequestId === "string" && a.newRequestId ? `request_id ${a.newRequestId}` : "a new request_id";
     return `Nothing was paid: this request_id belongs to an earlier payment. For this request, ask again with ${fresh}.`;
@@ -120032,6 +120033,10 @@ function transferSay(a) {
   const sent = usdcText2(a.send?.amountAtomic);
   const kept2 = a.send?.keptPrivateAtomic && a.send.keptPrivateAtomic !== "0" ? usdcText2(a.send.keptPrivateAtomic) : null;
   const later = "If this chat ends first, it continues at your next request.";
+  if (a.replayed === true) {
+    const fresh = typeof a.newRequestId === "string" && a.newRequestId ? `request_id ${a.newRequestId}` : "a new request_id";
+    return `This request_id belongs to an earlier transfer to ${to}; this call moved nothing. To transfer again, ask with ${fresh}.`;
+  }
   switch (a.stage) {
     case "selling":
       return `Selling the token for ${usdc6}; then it goes privately to ${to}. ${later}`;
@@ -127543,7 +127548,9 @@ ${canonical5}`;
     const float = floatRefusal(error);
     if (float && float[0] === code2) {
       const [, detail, sharedNext] = float;
-      const floatNext = inference ? sharedNext.replace(/\bx402_pay\b/g, tool) : sharedNext;
+      const prunedId = code2 === "p03_float_receipt_pruned" ? newRequestIdFor(requestId) : void 0;
+      const sharedFloatNext = inference ? sharedNext.replace(/\bx402_pay\b/g, tool) : sharedNext;
+      const floatNext = prunedId ? `${sharedFloatNext}: use the new request_id "${prunedId}"` : sharedFloatNext;
       let one;
       try {
         one = readBalance(paidStore ?? session.openStore());
@@ -127578,6 +127585,7 @@ ${canonical5}`;
         ...typeof error?.feeAtomic === "string" ? { feeAtomic: error.feeAtomic } : {},
         // conversationNotKept (floatPay.mjs finishedPruned): a private conversation, whose answer the wallet never kept.
         ...error?.conversationNotKept === true ? { conversationNotKept: true } : {},
+        ...prunedId ? { newRequestId: prunedId } : {},
         // floatId: Shinjuku's id of this payment, which wallet_receipts shows with the refund's state and transaction (realSpeed3
         // force-live 5r, 2026-10-22: the answer gave no id, so nobody could look the refund up).
         // refundAtomic and refundEtaSeconds (Shinjuku's time) for a proven refund; an unproven send carries ambiguous: true.
@@ -131714,7 +131722,7 @@ ${canonical5}`;
       properties: {
         amount: { type: "string", description: 'USDC to shield, like "0.37" (up to 6 decimals). Pass this or amount_atomic.' },
         amount_atomic: { type: "string", pattern: "^[1-9][0-9]*$", description: "USDC to shield, in atomic units (1000000 = 1 USDC, 370000 = 0.37 USDC): any amount from 10000 (0.01 USDC) while the balance stays at most 5 USDC." },
-        request_id: { type: "string", pattern: "^[A-Za-z0-9._:-]{1,128}$", description: "Optional. Your stable name for this deposit, like shield-1; pass it again to read the status." }
+        request_id: { type: "string", pattern: "^[A-Za-z0-9._:-]{1,128}$", description: "Optional. Leave it out for a new deposit (the answer names the id it made). Pass the request_id of an earlier answer only to read or continue that deposit." }
       },
       required: [],
       additionalProperties: false
@@ -131732,7 +131740,7 @@ ${canonical5}`;
         amount: { type: "string", description: 'USDC to send, like "2" or "0.37" (up to 6 decimals). Pass this or amount_atomic.' },
         amount_atomic: { type: "string", pattern: "^[1-9][0-9]*$", description: "USDC to send, in atomic units (1000000 = 1 USDC)." },
         to: { type: "string", description: "The receiving Solana address (base58), exactly as the user gave it. Leave it out to send to the owner's own wallet when the owner set exactly one (wallet_balance session.unshield.to); with none or several set, pass it." },
-        request_id: { type: "string", pattern: "^[A-Za-z0-9._:-]{1,128}$", description: "Optional. Your stable name for this send, like send-1; pass it again to read the status." },
+        request_id: { type: "string", pattern: "^[A-Za-z0-9._:-]{1,128}$", description: "Optional. Leave it out for a new send (the answer names the id it made). Pass the request_id of an earlier answer only to read or continue that send." },
         parts: { type: "integer", minimum: 1, maximum: 8, description: "Optional, default 1: send the amount as this many smaller payments (a private send), of random sizes in whole 0.01 USDC: the sizes differ only when the amount allows it (0.02 USDC in 2 goes as 0.01 + 0.01; privateSend lists each amount). Each one carries at least 10000 atomic (0.01 USDC). Above 1 it needs max_delay_minutes 1-60 (smaller payments with no wait are refused: they would leave together). Each one is sent after a random wait of up to max_delay_minutes (the first one too), so the chain shows no single exit of this amount at this time; max_delay_minutes alone delays one exit. " + SEND_RUNS_ON + ` Late ones never go together. While some are unsent, x402_pay may spend only the rest of the balance. The plan is saved in the wallet before the first one, so the same request_id (with the same \`parts\` and max_delay_minutes) continues after a restart and never sends one twice; the answer's privateSend lists each one (state, amount, when it may go, transactions), sentAtomic, and remainingAtomic. The user confirms the whole send once. Each one is a full unshield, so it takes as long as one, and the facilitator pays the network fee of each. Privacy limit (tell the user): every payment goes to the SAME \`to\`, so anyone who adds up that address's incoming transfers sees the total; the smaller payments hide the time and the single amount of the exit, not the sum the address received. wallet_cancel with the same request_id stops the ones not sent yet (their value stays in the private balance); while one is being sent, that call waits for it to finish, up to about ${CALL_BUDGET_MS / 1e3} s.` },
         max_delay_minutes: { type: "integer", minimum: 0, maximum: 60, description: "Optional, default 0: each smaller payment, the first included, is sent after a random wait of up to this many minutes (a private send)." }
       },
@@ -131773,7 +131781,7 @@ ${canonical5}`;
       properties: {
         amount: { type: "string", description: 'USDC to shield, like "0.37" (up to 6 decimals). Pass this or amount_atomic, unless action is cancel.' },
         amount_atomic: { type: "string", pattern: "^[1-9][0-9]*$", description: "USDC to shield, in atomic units (1000000 = 1 USDC, 370000 = 0.37 USDC): any amount from 10000 (0.01 USDC) while the balance stays at most 5 USDC. Required unless action is cancel." },
-        request_id: { type: "string", pattern: "^[A-Za-z0-9._:-]{1,128}$", description: "Optional for a deposit, needed for cancel. Your stable name for this deposit, like from-phantom-1; pass it again (with the same amount) to read the status." },
+        request_id: { type: "string", pattern: "^[A-Za-z0-9._:-]{1,128}$", description: "Optional for a deposit, needed for cancel. Leave it out for a new deposit (the answer names the id it made). Pass the request_id of an earlier answer (with the same amount) only to read, continue, or cancel that deposit." },
         action: { type: "string", enum: ["deposit", "cancel"], description: "deposit (the default): start or read this deposit. cancel: close this request's one-time address while nothing at all reached it (no amount needed)." }
       },
       required: [],
@@ -132674,7 +132682,10 @@ ${canonical5}`;
     } else if (sendStop === "split") {
       next = `${sentSome ? "Nothing more was sent" : "Nothing was sent yet"}: the private balance holds the next payment of this send, but the wallet must first get that money ready to send. It does that by itself, at each wallet request. Do not cancel the send: tell the user it is not stuck. In a few minutes, ${poll} again: it continues the send where it stopped (it never sends a payment twice)`;
     }
-    const inBox = plan.approval?.by === "elicitation";
+    if (extra.replayed === true) {
+      next = `This request_id belongs to an earlier transfer; this call moved nothing new. About that transfer: ${next.replace(/\.$/, "")}. To transfer again, call wallet_transfer_token with the new request_id "${extra.newRequestId}"`;
+    }
+    const inBox = plan.approval?.by === "elicitation" && extra.replayed !== true;
     return json3({
       ok: true,
       ...view2,
@@ -132796,7 +132807,9 @@ ${canonical5}`;
       const existing = readTransferToken(store, id);
       if (existing) {
         if (!sameTransfer(existing, request)) return transferReused(id);
-        return TRANSFER_RUNNING_STATES.has(existing.state) && existing.state !== "sold_waiting_room" || tidyOpen(existing) ? await answerSoon(id, { reused: true }, call) : transferAnswer(existing, { reused: true });
+        if (TRANSFER_RUNNING_STATES.has(existing.state) && existing.state !== "sold_waiting_room" || tidyOpen(existing)) return await answerSoon(id, { reused: true }, call);
+        const ended = ["done", "cancelled"].includes(existing.state) ? { replayed: true, newRequestId: `${id.slice(0, 31)}-${Date.now().toString(36)}` } : {};
+        return transferAnswer(existing, { reused: true, ...ended });
       }
     } catch (error) {
       return transferRefusal(error, "transfer_plan_unreadable", "tell your owner");
@@ -133042,7 +133055,7 @@ ${canonical5}`;
         token_mint: { type: "string", description: "The base58 mint address of the token to sell, like DezXAZ8z7PnrnRJjz3wXBoRgixCa6xjnB7YaB1pPB263 (BONK). Never a symbol." },
         amount_atomic: { type: "string", pattern: "^[1-9][0-9]*$", description: 'How much of the token to sell, in its own base units: "1250000" = 1.25 of a 6-decimal token.' },
         to: { type: "string", description: "The receiving Solana address (base58), exactly as the user gave it. It receives USDC and must already be able to receive USDC." },
-        request_id: { type: "string", pattern: "^[A-Za-z0-9_-]{1,40}$", description: "Your stable name for this transfer, like move-bonk-1; wallet_transfer_token_status takes it." },
+        request_id: { type: "string", pattern: "^[A-Za-z0-9_-]{1,40}$", description: "A new name for each new transfer, like move-bonk-k7q2 (an id an earlier transfer used only reads that transfer and moves nothing); wallet_transfer_token_status takes it." },
         parts: { type: "integer", minimum: 2, maximum: 8, description: "Optional, default 2: the USDC leaves as this many payments of random sizes in whole 0.01 USDC (each at least 0.01 USDC; the sizes differ only when the amount allows it: 0.02 USDC in 2 goes as 0.01 + 0.01)." },
         max_delay_minutes: { type: "integer", minimum: 1, maximum: 60, description: "Optional, default 30: each payment waits a random time up to this many minutes before it leaves." },
         max_slippage_bps: { type: "integer", minimum: 1, maximum: 300, description: "Optional, default 50 (0.5 %): the sell fails rather than give less than the quote minus this." },