shinjuku-shielded 0.3.155 → 0.3.156

package/README.md

@@ -6,19 +6,19 @@ answers privately, in a terminal chat or for your agent app. Its `mcp`
 command runs a local MCP server (stdio) for your agent. Your keys never
 leave your machine.
 
-This is version 0.3.155. The npm packages `shinjuku-shield` and
+This is version 0.3.156. The npm packages `shinjuku-shield` and
 `shinjuku-shielded` hold the same files. The command is `shinjuku`.
 
 ## Set up
 
 ```sh
-npm install -g shinjuku@0.3.155
+npm install -g shinjuku@0.3.156
 shinjuku setup
 ```
 
 Type the two lines as they are. `npx install shinjuku` does not work: npx
 reads `install` as the name of another npm package. To set up without
-installing, type `npx shinjuku@0.3.155 setup`.
+installing, type `npx shinjuku@0.3.156 setup`.
 
 Setup makes the wallet on this machine, a private passphrase file, and the
 checked proof tools (about 191 MB), and writes `config.json`. It also writes
@@ -36,13 +36,13 @@ Every wallet command works after `shinjuku`, for example `shinjuku balance`,
 Claude Code:
 
 ```sh
-claude mcp add --scope user shinjuku -- npx -y --no-audit --no-fund shinjuku-shield@0.3.155 mcp
+claude mcp add --scope user shinjuku -- npx -y --no-audit --no-fund shinjuku-shield@0.3.156 mcp
 ```
 
 Claude Desktop (`claude_desktop_config.json`) or Cursor (`~/.cursor/mcp.json`):
 
 ```json
-{ "mcpServers": { "shinjuku": { "command": "npx", "args": ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.155", "mcp"] } } }
+{ "mcpServers": { "shinjuku": { "command": "npx", "args": ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.156", "mcp"] } } }
 ```
 
 On native Windows, if the host cannot find `npx`, use `"command": "cmd"` and
@@ -55,7 +55,7 @@ Codex (the Codex app and Codex CLI read the same file, `~/.codex/config.toml`):
 ```toml
 [mcp_servers.shinjuku]
 command = "npx"
-args = ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.155", "mcp"]
+args = ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.156", "mcp"]
 startup_timeout_sec = 120
 tool_timeout_sec = 300
 ```

package/manifest.json

@@ -1,9 +1,9 @@
 {
   "schema": "carbon-shielded-wallet/bundle-manifest/v1",
   "file": "shinjuku-wallet.mjs",
-  "sha256": "65d2837cf983622ed22a9d2bfb488a3a6ff0f276cb0d561b1be6074415daab0f",
-  "bytes": 9055610,
-  "sourceCommit": "5645304267acd2efd47b75cf75ae25ffae3096c5",
+  "sha256": "003fb669ed2395e72fbedad6336c943c92c940fba878d03c4fa03245e2b5ae78",
+  "bytes": 9056153,
+  "sourceCommit": "41849a3c692d96c166971d1dd5e13ca84cbceb12",
   "sourceDirty": false,
   "installRecordMatchesLockfile": true,
   "releaseRule": "valid only when two fresh npm ci --ignore-scripts builds on different OSes give the same sha256; installRecordMatchesLockfile true means every entry npm installed equals its package-lock.json entry and every entry not marked optional, devOptional included, is installed: an optional entry (a package for another platform) may be absent",
@@ -1038,5 +1038,5 @@
       "version": "1.8.0"
     }
   ],
-  "publishedAt": "2026-11-03T05:58:09.739Z"
+  "publishedAt": "2026-11-03T06:19:18.430Z"
 }

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "shinjuku-shielded",
-  "version": "0.3.155",
+  "version": "0.3.156",
   "mcpName": "io.github.ShinjukuStaition/shinjuku-mcp",
   "description": "Shinjuku Shielded, the private x402 facilitator on Solana: the self-custody wallet CLI and its MCP server. Shield, pay, and unshield USDC from any MCP agent, under caps you set.",
-  "shinjukuRelease": "65d2837c",
-  "shinjukuSha256": "65d2837cf983622ed22a9d2bfb488a3a6ff0f276cb0d561b1be6074415daab0f",
+  "shinjukuRelease": "003fb669",
+  "shinjukuSha256": "003fb669ed2395e72fbedad6336c943c92c940fba878d03c4fa03245e2b5ae78",
   "license": "SEE LICENSE IN LICENSE.txt",
   "author": "Shinjuku Shielded",
   "homepage": "https://github.com/ShinjukuStaition/shinjuku-shield#readme",

package/shinjuku-wallet.mjs

@@ -42618,6 +42618,15 @@ function markPhase(phase, outcome) {
   } catch {
   }
 }
+function boundMarkPhase() {
+  const write = scope.getStore();
+  return (phase, outcome) => {
+    try {
+      write?.(phase, outcome);
+    } catch {
+    }
+  };
+}
 function poolReadOutcome(slot3, moved) {
   let text3;
   try {
@@ -42917,6 +42926,9 @@ function tunnelRefused(statusCode) {
 }
 function optimisticConnect(params, { proxyHost, proxyPort, closedInRow }) {
   const target = String(params.path);
+  const mark = boundMarkPhase();
+  const startedAt = Date.now();
+  let dials = 0;
   const head = `CONNECT ${target} HTTP/1.1\r
 ${Object.entries(params.headers ?? {}).filter(([name, value2]) => value2 !== void 0 && !/[\r\n]/.test(`${name}${value2}`)).map(([name, value2]) => `${name}: ${value2}\r
 `).join("")}\r
@@ -42969,6 +42981,7 @@ ${Object.entries(params.headers ?? {}).filter(([name, value2]) => value2 !== voi
     if (first) pendingReject = reject;
     reply = Buffer.alloc(0);
     ready = false;
+    dials += 1;
     socket = net.connect(proxyPort, proxyHost);
     socket.setNoDelay(true);
     let connected = false;
@@ -42977,6 +42990,7 @@ ${Object.entries(params.headers ?? {}).filter(([name, value2]) => value2 !== voi
       socket.write(head);
       for (const chunk of sent) socket.write(chunk);
       ready = true;
+      mark("tunnel-sent", `dial${dials}`);
       if (first) pendingReject = void 0;
       resolve39();
     });
@@ -42990,9 +43004,11 @@ ${Object.entries(params.headers ?? {}).filter(([name, value2]) => value2 !== voi
       if (end < 0) return;
       const status = Number(/^HTTP\/1\.[01] (\d{3})/.exec(reply.subarray(0, reply.indexOf("\r\n")).toString("latin1"))?.[1] ?? 0);
       if (status !== 200) {
+        mark("tunnel-refused", `http${status}`);
         stream.destroy(tunnelRefused(status));
         return;
       }
+      mark("tunnel-200", `ms${Date.now() - startedAt}_dial${dials}`);
       open4 = true;
       sent.length = 0;
       closedInRow.delete(target);
@@ -43019,6 +43035,7 @@ ${Object.entries(params.headers ?? {}).filter(([name, value2]) => value2 !== voi
         return;
       }
       const closed = (closedInRow.get(target) ?? 0) + 1;
+      mark("tunnel-closed", `n${closed}`);
       if (closed < TUNNEL_CLOSED_TRIES) {
         closedInRow.set(target, closed);
         dial(false).catch((error) => stream.destroy(error));
@@ -43042,6 +43059,7 @@ var init_tunnelGuard = __esm({
   "wallet/src/net/tunnelGuard.mjs"() {
     "use strict";
     init_keepAlive();
+    init_phaseTiming();
     RUN_MARK = "SHINJUKU_WALLET_PROXIED";
     TUNNEL_CLOSED_TRIES = 3;
   }
@@ -111049,9 +111067,9 @@ async function payTurn({ session, target, method, headers, body, maxPrice, polic
   if (session.closed) fail26("fetch_session_closed", "this payer session is closed; open a new one");
   const paymentStartedAt = Date.now();
   const timing = typeof opts?.timing === "function" ? opts.timing : session.timing();
-  const mark = (phase) => {
+  const mark = (phase, outcome) => {
     try {
-      timing?.(phase);
+      timing?.(phase, outcome);
     } catch {
     }
   };
@@ -111069,12 +111087,12 @@ async function payTurn({ session, target, method, headers, body, maxPrice, polic
         warmFloatConfig({ origin: new URL(session.memoServiceUrl).origin, timing: mark });
         startRecoveredPaymentTools(lazyProofTools(session));
       }
-      const response = await unpaidRequest(target, () => keepAliveInit({
+      const response = await withPhaseScope(mark, "fetch", () => unpaidRequest(target, () => keepAliveInit({
         method,
         headers,
         ...body ? { body } : {},
         redirect: "manual"
-      }), { timeoutMs: Number.isSafeInteger(opts?.unpaidTimeoutMs) && opts.unpaidTimeoutMs > 0 ? opts.unpaidTimeoutMs : void 0, onCut: opts?.onUnpaidCut });
+      }), { timeoutMs: Number.isSafeInteger(opts?.unpaidTimeoutMs) && opts.unpaidTimeoutMs > 0 ? opts.unpaidTimeoutMs : void 0, onCut: opts?.onUnpaidCut }));
       if (response.status !== 402) return response;
       const encoded = response.headers.get("PAYMENT-REQUIRED");
       void drainBody(response);