shinjuku-shielded 0.3.152 → 0.3.153

package/README.md

@@ -6,19 +6,19 @@ answers privately, in a terminal chat or for your agent app. Its `mcp`
 command runs a local MCP server (stdio) for your agent. Your keys never
 leave your machine.
 
-This is version 0.3.152. The npm packages `shinjuku-shield` and
+This is version 0.3.153. The npm packages `shinjuku-shield` and
 `shinjuku-shielded` hold the same files. The command is `shinjuku`.
 
 ## Set up
 
 ```sh
-npm install -g shinjuku@0.3.152
+npm install -g shinjuku@0.3.153
 shinjuku setup
 ```
 
 Type the two lines as they are. `npx install shinjuku` does not work: npx
 reads `install` as the name of another npm package. To set up without
-installing, type `npx shinjuku@0.3.152 setup`.
+installing, type `npx shinjuku@0.3.153 setup`.
 
 Setup makes the wallet on this machine, a private passphrase file, and the
 checked proof tools (about 191 MB), and writes `config.json`. It also writes
@@ -36,13 +36,13 @@ Every wallet command works after `shinjuku`, for example `shinjuku balance`,
 Claude Code:
 
 ```sh
-claude mcp add --scope user shinjuku -- npx -y --no-audit --no-fund shinjuku-shield@0.3.152 mcp
+claude mcp add --scope user shinjuku -- npx -y --no-audit --no-fund shinjuku-shield@0.3.153 mcp
 ```
 
 Claude Desktop (`claude_desktop_config.json`) or Cursor (`~/.cursor/mcp.json`):
 
 ```json
-{ "mcpServers": { "shinjuku": { "command": "npx", "args": ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.152", "mcp"] } } }
+{ "mcpServers": { "shinjuku": { "command": "npx", "args": ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.153", "mcp"] } } }
 ```
 
 On native Windows, if the host cannot find `npx`, use `"command": "cmd"` and
@@ -55,7 +55,7 @@ Codex (the Codex app and Codex CLI read the same file, `~/.codex/config.toml`):
 ```toml
 [mcp_servers.shinjuku]
 command = "npx"
-args = ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.152", "mcp"]
+args = ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.153", "mcp"]
 startup_timeout_sec = 120
 tool_timeout_sec = 300
 ```

package/manifest.json

@@ -1,9 +1,9 @@
 {
   "schema": "carbon-shielded-wallet/bundle-manifest/v1",
   "file": "shinjuku-wallet.mjs",
-  "sha256": "8ab2085ba462b3c2dda5d50de087d053593a7e96d2210bf9dfaa6d763dbe20d2",
-  "bytes": 9047711,
-  "sourceCommit": "683f9ff9c2d9058994e1628f7dee9116d2eeab39",
+  "sha256": "d446c36da9b526aea16cf685fb7b1532542f1eea13d0f2acabca373711bace8f",
+  "bytes": 9048030,
+  "sourceCommit": "9c091872009ec4e8a82ff9d5540fe00015cc93d1",
   "sourceDirty": false,
   "installRecordMatchesLockfile": true,
   "releaseRule": "valid only when two fresh npm ci --ignore-scripts builds on different OSes give the same sha256; installRecordMatchesLockfile true means every entry npm installed equals its package-lock.json entry and every entry not marked optional, devOptional included, is installed: an optional entry (a package for another platform) may be absent",
@@ -1038,5 +1038,5 @@
       "version": "1.8.0"
     }
   ],
-  "publishedAt": "2026-11-02T23:08:13.949Z"
+  "publishedAt": "2026-11-03T05:08:33.860Z"
 }

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "shinjuku-shielded",
-  "version": "0.3.152",
+  "version": "0.3.153",
   "mcpName": "io.github.ShinjukuStaition/shinjuku-mcp",
   "description": "Shinjuku Shielded, the private x402 facilitator on Solana: the self-custody wallet CLI and its MCP server. Shield, pay, and unshield USDC from any MCP agent, under caps you set.",
-  "shinjukuRelease": "8ab2085b",
-  "shinjukuSha256": "8ab2085ba462b3c2dda5d50de087d053593a7e96d2210bf9dfaa6d763dbe20d2",
+  "shinjukuRelease": "d446c36d",
+  "shinjukuSha256": "d446c36da9b526aea16cf685fb7b1532542f1eea13d0f2acabca373711bace8f",
   "license": "SEE LICENSE IN LICENSE.txt",
   "author": "Shinjuku Shielded",
   "homepage": "https://github.com/ShinjukuStaition/shinjuku-shield#readme",

package/shinjuku-wallet.mjs

@@ -53487,7 +53487,7 @@ var init_p03ProgramHistory = __esm({
         if (entry.indexedReplay === true) e1Seen = true;
       }
     }
-    ADDED_EXECUTABLES = globalThis[/* @__PURE__ */ Symbol.for("carbon-road/p03ProgramHistory/addedExecutables/v1")] ??= [];
+    ADDED_EXECUTABLES = globalThis[/* @__PURE__ */ Symbol.for("shinjuku-wallet/p03ProgramHistory/addedExecutables/v1")] ??= [];
     LATER_FLAGS = Object.freeze(["succession", "anchorRingWide"]);
     EXECUTABLE_FLAGS = ["compressedReplay", "indexedReplay", "lockedPoolRetire", "anchorRing", "succession", "anchorRingWide"];
     EXECUTABLE_KEYS = /* @__PURE__ */ new Set([
@@ -74371,7 +74371,7 @@ var init_p03ProgramHistory2 = __esm({
         if (entry.indexedReplay === true) e1Seen = true;
       }
     }
-    ADDED_EXECUTABLES2 = globalThis[/* @__PURE__ */ Symbol.for("carbon-road/p03ProgramHistory/addedExecutables/v1")] ??= [];
+    ADDED_EXECUTABLES2 = globalThis[/* @__PURE__ */ Symbol.for("shinjuku-wallet/p03ProgramHistory/addedExecutables/v1")] ??= [];
     LATER_FLAGS2 = Object.freeze(["succession", "anchorRingWide"]);
     EXECUTABLE_FLAGS2 = ["compressedReplay", "indexedReplay", "lockedPoolRetire", "anchorRing", "succession", "anchorRingWide"];
     EXECUTABLE_KEYS2 = /* @__PURE__ */ new Set([
@@ -103310,6 +103310,12 @@ function feePayerRotated(response, accepted) {
     return false;
   }
 }
+function feePayerNotManaged(response) {
+  return response.status === 402 && [
+    x402HeaderText(response, "payment-required", "error"),
+    x402HeaderText(response, "payment-response", "errorReason")
+  ].includes("fee_payer_not_managed_by_facilitator");
+}
 async function sellerAnswerText(response) {
   if (response.status >= 400 && response.status < 500) return sellerRefusalText(response);
   try {
@@ -104025,7 +104031,7 @@ function keepDiskPoolDomain(store, poolKey, poolDomain) {
   });
 }
 function walletEta(seedHex) {
-  const key = hash7(`carbon-road/float-eta/v1|${seedHex}`);
+  const key = hash7(`shinjuku-wallet/float-eta/v1|${seedHex}`);
   if (etaEntry?.key === key) return etaEntry.eta;
   const { eta } = deriveWalletViewingAuthority2({ seedBytes: Uint8Array.from(Buffer.from(seedHex, "hex")), generator: loadPayerGenerator() });
   etaEntry = { key, eta };
@@ -104088,8 +104094,8 @@ async function ownRefundAddress(store, connection) {
 }
 function canonicalBody({ requestId, seedHex, requirement, refundTo }) {
   if (typeof seedHex !== "string" || !/^[0-9a-f]{64,}$/i.test(seedHex)) fail21("p03_float_record_invalid");
-  const key = Buffer.from(hash7(`carbon-road/float-request-key/v1|${seedHex}`), "hex");
-  const opaque = `w-${createHmac8("sha256", key).update(`carbon-road/float-request/v2|${requestId}`).digest("hex").slice(0, 40)}`;
+  const key = Buffer.from(hash7(`shinjuku-wallet/float-request-key/v1|${seedHex}`), "hex");
+  const opaque = `w-${createHmac8("sha256", key).update(`shinjuku-wallet/float-request/v2|${requestId}`).digest("hex").slice(0, 40)}`;
   const text3 = `{"requestId":${JSON.stringify(opaque)},"requirement":${JSON.stringify(requirement)},"refundTo":${JSON.stringify(refundTo)}}`;
   const bytes2 = Buffer.from(text3, "utf8");
   if (bytes2.length > MAX_BODY_BYTES) fail21("p03_float_body_too_large");
@@ -104639,7 +104645,7 @@ async function payViaFloat({
       answeredAtMs = Date.now();
       mark(resend === 0 ? "seller-answered" : `seller-answered-resend-${resend}`);
       resendUntilMs ??= Date.now() + FEE_PAYER_RESEND_MS;
-      if (wasKept || resend >= FEE_PAYER_RESENDS || stopResends() || !feePayerRotated(response, accepted)) break;
+      if (wasKept || resend >= FEE_PAYER_RESENDS || stopResends() || !(feePayerRotated(response, accepted) || feePayerNotManaged(response))) break;
       dispatcher = newConnectionDispatcher();
       if (dispatcher === void 0) break;
       resendDispatchers.push(dispatcher);
@@ -105144,7 +105150,7 @@ var init_floatPay = __esm({
     poolDomains = /* @__PURE__ */ new Map();
     FLOAT_FACTS_SCHEMA = "carbon-shielded-wallet/float-facts/v1";
     floatFacts = /* @__PURE__ */ new Map();
-    floatFactsKey = (store) => createHmac8("sha256", Buffer.from(store.state.seedHex, "hex")).update("carbon-road/float-facts/v1").digest();
+    floatFactsKey = (store) => createHmac8("sha256", Buffer.from(store.state.seedHex, "hex")).update("shinjuku-wallet/float-facts/v1").digest();
     floatFactsMac = (store, facts) => createHmac8("sha256", floatFactsKey(store)).update(JSON.stringify(facts)).digest("hex");
     poolDomainReads = /* @__PURE__ */ new Map();
     poolDomainWarmFailedAt = /* @__PURE__ */ new Map();
@@ -115665,7 +115671,7 @@ function planLeg({ recovered, exitReserved = /* @__PURE__ */ new Set() }) {
   return { leg: void 0, stuckAtomic };
 }
 function moveBody({ amountAtomic, refundTo, fromPool, n, toPool }) {
-  const requestId = `w-${hash10(`carbon-road/move-request/v1|${fromPool}|${n}|${refundTo}`).slice(0, 40)}`;
+  const requestId = `w-${hash10(`shinjuku-wallet/move-request/v1|${fromPool}|${n}|${refundTo}`).slice(0, 40)}`;
   const bodyText = `{"amountAtomic":${JSON.stringify(amountAtomic)},"refundTo":${JSON.stringify(refundTo)},"requestId":${JSON.stringify(requestId)},"toPool":${JSON.stringify(toPool)}}`;
   return { bodyText, moveId: hash10(bodyText) };
 }