shinjuku-shielded 0.3.164 → 0.3.166

package/README.md

@@ -6,19 +6,19 @@ answers privately, in a terminal chat or for your agent app. Its `mcp`
 command runs a local MCP server (stdio) for your agent. Your keys never
 leave your machine.
 
-This is version 0.3.164. The npm packages `shinjuku-shield` and
+This is version 0.3.166. The npm packages `shinjuku-shield` and
 `shinjuku-shielded` hold the same files. The command is `shinjuku`.
 
 ## Set up
 
 ```sh
-npm install -g shinjuku@0.3.164
+npm install -g shinjuku@0.3.166
 shinjuku setup
 ```
 
 Type the two lines as they are. `npx install shinjuku` does not work: npx
 reads `install` as the name of another npm package. To set up without
-installing, type `npx shinjuku@0.3.164 setup`.
+installing, type `npx shinjuku@0.3.166 setup`.
 
 Setup makes the wallet on this machine, a private passphrase file, and the
 checked proof tools (about 191 MB), and writes `config.json`. It also writes
@@ -36,13 +36,13 @@ Every wallet command works after `shinjuku`, for example `shinjuku balance`,
 Claude Code:
 
 ```sh
-claude mcp add --scope user shinjuku -- npx -y --no-audit --no-fund shinjuku-shield@0.3.164 mcp
+claude mcp add --scope user shinjuku -- npx -y --no-audit --no-fund shinjuku-shield@0.3.166 mcp
 ```
 
 Claude Desktop (`claude_desktop_config.json`) or Cursor (`~/.cursor/mcp.json`):
 
 ```json
-{ "mcpServers": { "shinjuku": { "command": "npx", "args": ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.164", "mcp"] } } }
+{ "mcpServers": { "shinjuku": { "command": "npx", "args": ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.166", "mcp"] } } }
 ```
 
 On native Windows, if the host cannot find `npx`, use `"command": "cmd"` and
@@ -55,7 +55,7 @@ Codex (the Codex app and Codex CLI read the same file, `~/.codex/config.toml`):
 ```toml
 [mcp_servers.shinjuku]
 command = "npx"
-args = ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.164", "mcp"]
+args = ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.166", "mcp"]
 startup_timeout_sec = 120
 tool_timeout_sec = 300
 ```

package/manifest.json

@@ -1,9 +1,9 @@
 {
   "schema": "carbon-shielded-wallet/bundle-manifest/v1",
   "file": "shinjuku-wallet.mjs",
-  "sha256": "c7dd8df81dd11b9f7cce75520a5c4ebacc1cd071faa64497a5454745cce12a8e",
-  "bytes": 9297384,
-  "sourceCommit": "fe74fff1c2ab00d0275954e97d69067caa3dd89c",
+  "sha256": "162d3a005e0491faedec0df58d95385a183a68993d209faa54e51dbdc2c81afb",
+  "bytes": 9298964,
+  "sourceCommit": "4d37fd634d7539d6289106ed611016d77dd7249f",
   "sourceDirty": false,
   "installRecordMatchesLockfile": true,
   "releaseRule": "valid only when two fresh npm ci --ignore-scripts builds on different OSes give the same sha256; installRecordMatchesLockfile true means every entry npm installed equals its package-lock.json entry and every entry not marked optional, devOptional included, is installed: an optional entry (a package for another platform) may be absent",
@@ -1038,5 +1038,5 @@
       "version": "1.8.0"
     }
   ],
-  "publishedAt": "2026-11-04T23:08:59.755Z"
+  "publishedAt": "2026-11-05T02:48:05.006Z"
 }

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "shinjuku-shielded",
-  "version": "0.3.164",
+  "version": "0.3.166",
   "mcpName": "io.github.ShinjukuStaition/shinjuku-mcp",
   "description": "Shinjuku Shielded, the private x402 facilitator on Solana: the self-custody wallet CLI and its MCP server. Shield, pay, and unshield USDC from any MCP agent, under caps you set.",
-  "shinjukuRelease": "c7dd8df8",
-  "shinjukuSha256": "c7dd8df81dd11b9f7cce75520a5c4ebacc1cd071faa64497a5454745cce12a8e",
+  "shinjukuRelease": "162d3a00",
+  "shinjukuSha256": "162d3a005e0491faedec0df58d95385a183a68993d209faa54e51dbdc2c81afb",
   "license": "SEE LICENSE IN LICENSE.txt",
   "author": "Shinjuku Shielded",
   "homepage": "https://github.com/ShinjukuStaition/shinjuku-shield#readme",

package/shinjuku-wallet.mjs

@@ -102902,7 +102902,16 @@ function floatOutcomeWords(code2, error, t) {
     // recordVerdict): the code names no retry, because a rerun only resends the same transfer (a live check 0.3.106 gate, 2026-10-27).
     case "p03_float_seller_refused_after_payment": {
       const unsure = floatUnsureWords(code2, error, t, `${p.the} refused this request (HTTP ${error?.httpStatus}${typeof error?.sellerReason === "string" ? `: ${JSON.stringify(error.sellerReason)}` : ""}) after the payment was sent`);
-      if (!floatChargeTooLate(error)) return unsure;
+      if (!floatChargeTooLate(error)) {
+        const data = t.ai ? "no answer" : "no data";
+        const refused = error?.httpStatus === 402 ? `${p.the} refused the payment and sent ${data}` : `${p.the} refused the request (HTTP ${error?.httpStatus}) and sent ${data}`;
+        const told = `${refused.charAt(0).toUpperCase()}${refused.slice(1)}. Your ${amountText(error?.paidAtomic, "payment")} comes back by itself unless ${p.the} still takes it`;
+        return [
+          code2,
+          unsure[1],
+          `${t.userReads === true ? `${told}.` : `Tell the user plainly: "${told}."`} It usually comes back about 2 minutes after the payment (up to about 7). ${t.userReads === true ? `Later: ${t.result}` : `The next wallet_balance, x402_pay or inference_chat answer says when the refund arrives (refundNotices: tell the user that line); ${t.result}`}. Do not pay again with ${t.newId} until then`
+        ];
+      }
       return [
         code2,
         `${unsure[1]}. ${p.The} worked ${error.sellerAnswerSeconds} s before it tried to charge, and its answer says the charge failed. A Solana payment expires about 30 s after it is signed, so ${p.a} that works this long before it charges cannot be paid by any wallet`,
@@ -104040,10 +104049,13 @@ async function sellerRefusalText(response) {
   if (reader) {
     try {
       const decoder = new TextDecoder();
-      while (text3.length < 4096) {
+      let bytes2 = 0;
+      while (bytes2 < SELLER_REASON_READ_BYTES) {
         const { done, value: value2 } = await reader.read();
         if (done) break;
-        text3 += decoder.decode(value2, { stream: true });
+        const part = value2.subarray(0, SELLER_REASON_READ_BYTES - bytes2);
+        bytes2 += part.length;
+        text3 += decoder.decode(part, { stream: true });
       }
     } catch {
       text3 = "";
@@ -104056,16 +104068,17 @@ async function sellerRefusalText(response) {
   let named = text3.trim() !== "";
   try {
     const parsed2 = JSON.parse(text3);
-    const candidate = parsed2?.error?.message ?? parsed2?.error ?? parsed2?.message;
+    const candidate = typeof parsed2 === "string" ? parsed2 : parsed2?.error?.message ?? parsed2?.error ?? parsed2?.message;
     if (typeof candidate === "string") said = candidate;
     else named = false;
   } catch {
   }
   if (!named || GENERIC_REASON.test(said.trim())) {
     const headers = [x402HeaderText(response, "payment-response", "errorReason"), x402HeaderText(response, "payment-required", "error")].filter((reason) => reason !== void 0);
-    said = headers.find((reason) => !GENERIC_REASON.test(reason.trim())) ?? (named ? said : headers[0] ?? said);
+    said = headers.find((reason) => !GENERIC_REASON.test(reason.trim())) ?? (named ? said : headers[0] ?? "");
   }
-  const line = said.replace(/[^\x20-\x7e]+/g, " ").replace(/\s+/g, " ").trim().slice(0, 300);
+  const whole = said.replace(/[^\x20-\x7e]+/g, " ").replace(/\s+/g, " ").trim();
+  const line = whole.length > SELLER_REASON_MAX ? `${whole.slice(0, SELLER_REASON_MAX - 3)}...` : whole;
   return line && !/^(\{\s*\}|\[\s*\])$/.test(line) ? line : void 0;
 }
 function x402Header(response, name) {
@@ -105858,7 +105871,7 @@ function paidResult(record, replayed) {
     float: { floatId: record.floatId }
   };
 }
-var import_web3115, FLOAT_PAYMENT_SCHEMA2, REGENERATE_CODES, FLOAT_PAYMENT_WAL_PREFIX2, FLOAT_CONFIG_SCHEMA, FLOAT_PAY_PATH, FLOAT_MEMO_PATH, FLOAT_STATUS_PATH, MAX_BODY_BYTES, FLOAT_REFUND_ETA_SECONDS, REFUND_READ_EARLY_MS, REFUND_ETA_MAX_SECONDS, refundDueOf, REFUND_SETTLED_AFTER_MS, REFUND_OUTCOME_NEWS_MS, FINISHING_POLL_MS, FINISHING_LIMIT_MS, SELLER_TIMEOUT_MS, FLOAT_STATUS_START_MS, FLOAT_STATUS_POLL_MS, FLOAT_STATUS_TIMEOUT_MS, FLOAT_TRANSFER_DEAD, FLOAT_PAYMENT_REVERTED, VERDICT_POLL_MS, SELLER_ANSWER_VERDICT_MS, TRANSFER_MIN_BLOCKS_LEFT, TRANSFER_FRESH_MS, BLOCK_HEIGHT_TIMEOUT_MS, CONFIG_TIMEOUT_MS, MEMO_UPLOAD_TIMEOUT_MS, CONFIG_CACHE_MS, FLOAT_POOL_WARM_MS, DECIMAL3, POSITIVE, PENDING_CODES, FLOAT_FRONT_HEADER, hash7, fail21, GENERIC_REASON, FEE_PAYER_RESENDS, FEE_PAYER_RESEND_MS, GLOBAL_DISPATCHER4, sortedJson, MODEL_ID, floatPaymentWalName, floatRecordName, FLOAT_KEEP_BYTES_MS, memoryOnlyNeedsScrub, FLOAT_KEEP_OPEN_REQUEST_MS, configCache, configGeneration, configReadSequence, configReads, configRefreshes, SPECULATED_MAX_AGE_MS, speculatedQuotes, poolDomains, FLOAT_FACTS_SCHEMA, floatFacts, floatFactsKey, floatFactsMac, poolDomainReads, poolDomainWarmFailedAt, WARM_RETRY_MS, payerGenerator, etaEntry, loadPayerGenerator, plainText, BROADCAST_REFUSED, BROADCAST_REFUSED_STANDARD, BROADCAST_DEAD, TRANSFER_LANDING_WINDOW_MS, PROOF_DELIVERY_MS, SELF_BROADCAST_LEG1_LEFT_MS, BROADCAST_UNSIGNED, BROADCAST_NO_LOOKUP, BROADCAST_LANDED, BROADCAST_LIMIT_MS, BROADCAST_QUOTE_MARGIN_MS, SELF_BROADCAST_RESEND_MS, SELF_BROADCAST_UNANSWERED_RESEND_MS, SELLER_HEADERS_MAX_COUNT, SELLER_HEADERS_MAX_BYTES, SELLER_HEADERS_KEPT;
+var import_web3115, FLOAT_PAYMENT_SCHEMA2, REGENERATE_CODES, FLOAT_PAYMENT_WAL_PREFIX2, FLOAT_CONFIG_SCHEMA, FLOAT_PAY_PATH, FLOAT_MEMO_PATH, FLOAT_STATUS_PATH, MAX_BODY_BYTES, FLOAT_REFUND_ETA_SECONDS, REFUND_READ_EARLY_MS, REFUND_ETA_MAX_SECONDS, refundDueOf, REFUND_SETTLED_AFTER_MS, REFUND_OUTCOME_NEWS_MS, FINISHING_POLL_MS, FINISHING_LIMIT_MS, SELLER_TIMEOUT_MS, FLOAT_STATUS_START_MS, FLOAT_STATUS_POLL_MS, FLOAT_STATUS_TIMEOUT_MS, FLOAT_TRANSFER_DEAD, FLOAT_PAYMENT_REVERTED, VERDICT_POLL_MS, SELLER_ANSWER_VERDICT_MS, TRANSFER_MIN_BLOCKS_LEFT, TRANSFER_FRESH_MS, BLOCK_HEIGHT_TIMEOUT_MS, CONFIG_TIMEOUT_MS, MEMO_UPLOAD_TIMEOUT_MS, CONFIG_CACHE_MS, FLOAT_POOL_WARM_MS, DECIMAL3, POSITIVE, PENDING_CODES, FLOAT_FRONT_HEADER, hash7, fail21, GENERIC_REASON, SELLER_REASON_MAX, SELLER_REASON_READ_BYTES, FEE_PAYER_RESENDS, FEE_PAYER_RESEND_MS, GLOBAL_DISPATCHER4, sortedJson, MODEL_ID, floatPaymentWalName, floatRecordName, FLOAT_KEEP_BYTES_MS, memoryOnlyNeedsScrub, FLOAT_KEEP_OPEN_REQUEST_MS, configCache, configGeneration, configReadSequence, configReads, configRefreshes, SPECULATED_MAX_AGE_MS, speculatedQuotes, poolDomains, FLOAT_FACTS_SCHEMA, floatFacts, floatFactsKey, floatFactsMac, poolDomainReads, poolDomainWarmFailedAt, WARM_RETRY_MS, payerGenerator, etaEntry, loadPayerGenerator, plainText, BROADCAST_REFUSED, BROADCAST_REFUSED_STANDARD, BROADCAST_DEAD, TRANSFER_LANDING_WINDOW_MS, PROOF_DELIVERY_MS, SELF_BROADCAST_LEG1_LEFT_MS, BROADCAST_UNSIGNED, BROADCAST_NO_LOOKUP, BROADCAST_LANDED, BROADCAST_LIMIT_MS, BROADCAST_QUOTE_MARGIN_MS, SELF_BROADCAST_RESEND_MS, SELF_BROADCAST_UNANSWERED_RESEND_MS, SELLER_HEADERS_MAX_COUNT, SELLER_HEADERS_MAX_BYTES, SELLER_HEADERS_KEPT;
 var init_floatPay = __esm({
   "wallet/src/pay/floatPay.mjs"() {
     "use strict";
@@ -105926,6 +105939,8 @@ var init_floatPay = __esm({
       throw Object.assign(new Error(code2), extra);
     };
     GENERIC_REASON = /^payment[\s_-]*required[.!]?$/i;
+    SELLER_REASON_MAX = 1200;
+    SELLER_REASON_READ_BYTES = 4096;
     FEE_PAYER_RESENDS = 8;
     FEE_PAYER_RESEND_MS = 15e3;
     GLOBAL_DISPATCHER4 = /* @__PURE__ */ Symbol.for("undici.globalDispatcher.1");
@@ -107823,12 +107838,9 @@ function endpoint(value2) {
   return url.href;
 }
 function standardResourceMatches(published, requested) {
-  if (typeof published !== "string") return false;
-  const query = requested.indexOf("?");
-  const bare = query >= 0 ? requested.slice(0, query) : requested;
-  return [requested, bare].some((candidate) => published === candidate || candidate.startsWith("https://") && published === `http://${candidate.slice("https://".length)}`) || sameParsedResource(published, requested);
+  return typeof published === "string" && sameHostAndPath(published, requested);
 }
-function sameParsedResource(published, requested) {
+function sameHostAndPath(published, requested) {
   try {
     const seller = new URL(published);
     const asked = new URL(requested);
@@ -107836,8 +107848,7 @@ function sameParsedResource(published, requested) {
     if (seller.username !== asked.username || seller.password !== asked.password || seller.host !== asked.host) return false;
     const segments = (url) => url.pathname.split("/").map(decodeURIComponent);
     const [sellerPath, askedPath] = [segments(seller), segments(asked)];
-    if (sellerPath.length !== askedPath.length || sellerPath.some((segment, index) => segment !== askedPath[index])) return false;
-    return seller.search === "" || sameQueryItems(seller, asked);
+    return sellerPath.length === askedPath.length && sellerPath.every((segment, index) => segment === askedPath[index]);
   } catch {
     return false;
   }
@@ -110249,8 +110260,16 @@ function refusalSay(a, tool, again, npmVersion) {
       `${what[0].toUpperCase()}${what.slice(1)} went out${slow}. Not known yet whether it comes back. Nothing to do now.`,
       `${Seller} took ${a.sellerAnswerSeconds} s; Solana payments expire in about 30 s. ${kept3}. Nothing to do now.`
     ] : [];
+    const data2 = tool === "inference_chat" ? "no answer" : "no data";
+    const refusedHead = a.httpStatus === 402 ? `${Seller} refused the payment and sent ${data2}.` : Number.isInteger(a.httpStatus) ? `${Seller} refused the request (HTTP ${a.httpStatus}) and sent ${data2}.` : `${Seller} refused the request and sent ${data2}.`;
+    const comesBack = [
+      `Your ${total ? `${total} USDC` : "payment"} comes back by itself unless ${seller} still takes it.`,
+      `${what[0].toUpperCase()}${what.slice(1)} comes back unless ${seller} still takes it.`
+    ];
+    const refusedLines = !unsure && late2.length === 0 ? comesBack.map((tail) => `${refusedHead} ${tail}`) : [];
     return [
       ...late2,
+      ...refusedLines,
       `${head} ${kept3}. Nothing to do; do not pay again yet.`,
       `${head} ${kept3}. Do not pay again yet.`,
       `${head} ${kept3}. Nothing to do now.`,