shinjuku-shielded 0.3.166 → 0.3.167

package/README.md

@@ -6,19 +6,19 @@ answers privately, in a terminal chat or for your agent app. Its `mcp`
 command runs a local MCP server (stdio) for your agent. Your keys never
 leave your machine.
 
-This is version 0.3.166. The npm packages `shinjuku-shield` and
+This is version 0.3.167. The npm packages `shinjuku-shield` and
 `shinjuku-shielded` hold the same files. The command is `shinjuku`.
 
 ## Set up
 
 ```sh
-npm install -g shinjuku@0.3.166
+npm install -g shinjuku@0.3.167
 shinjuku setup
 ```
 
 Type the two lines as they are. `npx install shinjuku` does not work: npx
 reads `install` as the name of another npm package. To set up without
-installing, type `npx shinjuku@0.3.166 setup`.
+installing, type `npx shinjuku@0.3.167 setup`.
 
 Setup makes the wallet on this machine, a private passphrase file, and the
 checked proof tools (about 191 MB), and writes `config.json`. It also writes
@@ -36,13 +36,13 @@ Every wallet command works after `shinjuku`, for example `shinjuku balance`,
 Claude Code:
 
 ```sh
-claude mcp add --scope user shinjuku -- npx -y --no-audit --no-fund shinjuku-shield@0.3.166 mcp
+claude mcp add --scope user shinjuku -- npx -y --no-audit --no-fund shinjuku-shield@0.3.167 mcp
 ```
 
 Claude Desktop (`claude_desktop_config.json`) or Cursor (`~/.cursor/mcp.json`):
 
 ```json
-{ "mcpServers": { "shinjuku": { "command": "npx", "args": ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.166", "mcp"] } } }
+{ "mcpServers": { "shinjuku": { "command": "npx", "args": ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.167", "mcp"] } } }
 ```
 
 On native Windows, if the host cannot find `npx`, use `"command": "cmd"` and
@@ -55,7 +55,7 @@ Codex (the Codex app and Codex CLI read the same file, `~/.codex/config.toml`):
 ```toml
 [mcp_servers.shinjuku]
 command = "npx"
-args = ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.166", "mcp"]
+args = ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.167", "mcp"]
 startup_timeout_sec = 120
 tool_timeout_sec = 300
 ```

package/manifest.json

@@ -1,9 +1,9 @@
 {
   "schema": "carbon-shielded-wallet/bundle-manifest/v1",
   "file": "shinjuku-wallet.mjs",
-  "sha256": "162d3a005e0491faedec0df58d95385a183a68993d209faa54e51dbdc2c81afb",
-  "bytes": 9298964,
-  "sourceCommit": "4d37fd634d7539d6289106ed611016d77dd7249f",
+  "sha256": "6801635b43f010f60eea3c04a763a1ad06ef772c20b6a77907c8bdc66fae8e75",
+  "bytes": 9301251,
+  "sourceCommit": "eee4b3d7a248c78cfadf450c7eae8f2250e98de1",
   "sourceDirty": false,
   "installRecordMatchesLockfile": true,
   "releaseRule": "valid only when two fresh npm ci --ignore-scripts builds on different OSes give the same sha256; installRecordMatchesLockfile true means every entry npm installed equals its package-lock.json entry and every entry not marked optional, devOptional included, is installed: an optional entry (a package for another platform) may be absent",
@@ -1038,5 +1038,5 @@
       "version": "1.8.0"
     }
   ],
-  "publishedAt": "2026-11-05T02:48:05.006Z"
+  "publishedAt": "2026-11-05T03:40:15.715Z"
 }

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "shinjuku-shielded",
-  "version": "0.3.166",
+  "version": "0.3.167",
   "mcpName": "io.github.ShinjukuStaition/shinjuku-mcp",
   "description": "Shinjuku Shielded, the private x402 facilitator on Solana: the self-custody wallet CLI and its MCP server. Shield, pay, and unshield USDC from any MCP agent, under caps you set.",
-  "shinjukuRelease": "162d3a00",
-  "shinjukuSha256": "162d3a005e0491faedec0df58d95385a183a68993d209faa54e51dbdc2c81afb",
+  "shinjukuRelease": "6801635b",
+  "shinjukuSha256": "6801635b43f010f60eea3c04a763a1ad06ef772c20b6a77907c8bdc66fae8e75",
   "license": "SEE LICENSE IN LICENSE.txt",
   "author": "Shinjuku Shielded",
   "homepage": "https://github.com/ShinjukuStaition/shinjuku-shield#readme",

package/shinjuku-wallet.mjs

@@ -54314,12 +54314,29 @@ function hostConfigFile(target, { platform = process.platform, env = process.env
   if (target === "gemini") return join8(set("GEMINI_CLI_HOME") ?? home, ".gemini", "settings.json");
   if (target === "antigravity") return join8(home, ".gemini", "config", "mcp_config.json");
   if (target === "claude-desktop") {
-    if (platform === "win32") return join8(env.APPDATA || join8(home, "AppData", "Roaming"), "Claude", "claude_desktop_config.json");
+    if (platform === "win32") return packagedClaudeDesktopFile(env, home) ?? join8(env.APPDATA || join8(home, "AppData", "Roaming"), "Claude", "claude_desktop_config.json");
     if (platform === "darwin") return join8(home, "Library", "Application Support", "Claude", "claude_desktop_config.json");
     return join8(env.XDG_CONFIG_HOME || join8(home, ".config"), "Claude", "claude_desktop_config.json");
   }
   return void 0;
 }
+function packagedClaudeDesktopFile(env, home) {
+  const packages = join8(env.LOCALAPPDATA || join8(home, "AppData", "Local"), "Packages");
+  let names;
+  try {
+    names = readdirSync(packages);
+  } catch {
+    return void 0;
+  }
+  const files = names.filter((each) => /^Claude_[a-z0-9]+$/i.test(each)).map((name) => join8(packages, name, "LocalCache", "Roaming", "Claude", "claude_desktop_config.json")).filter((file) => existsSync(file));
+  if (files.length > 1) {
+    throw Object.assign(
+      new Error(`setup_host_config_ambiguous: this computer has ${files.length} Claude Desktop settings files (${files.join("; ")}), so the wallet did not pick one`),
+      { files }
+    );
+  }
+  return files[0];
+}
 function hostConfigText({ home, env = process.env, platform = process.platform, npmVersion, skip = /* @__PURE__ */ new Set(), userHome = homedir() } = {}) {
   const entry = mcpServerEntry({ home, platform, npmVersion });
   const more = ["vscode", "devin", "cline", "continue", "gemini", "antigravity"].filter((target) => !skip.has(target)).flatMap((target) => {
@@ -54332,7 +54349,10 @@ function hostConfigText({ home, env = process.env, platform = process.platform,
     ];
   });
   const member = `${JSON.stringify(MCP_SERVER_NAME)}: ${JSON.stringify(entry, null, 2)}`;
-  const files = [["claude-desktop", "Claude Desktop (claude_desktop_config.json)"], ["cursor", "Cursor (~/.cursor/mcp.json)"]].filter(([target]) => !skip.has(target)).map(([, label]) => label);
+  const files = [
+    ["claude-desktop", "Claude Desktop (claude_desktop_config.json: in Claude Desktop, Settings > Developer > Edit Config opens it)"],
+    ["cursor", "Cursor (~/.cursor/mcp.json)"]
+  ].filter(([target]) => !skip.has(target)).map(([, label]) => label);
   return [
     ...skip.has("claude-code") ? [] : claudeCodeShellWhy({ home, env, platform }) ? ["Claude Code:", `  ${claudeCodeShellWhy({ home, env, platform })}`] : claudeCodeLines({ home, env, platform, npmVersion }),
     ...files.length ? [
@@ -54340,7 +54360,7 @@ function hostConfigText({ home, env = process.env, platform = process.platform,
       ...member.split("\n").map((line) => `  ${line}`)
     ] : [],
     ...skip.has("codex") ? [] : [
-      "Codex (the Codex app and Codex CLI), at the end of ~/.codex/config.toml:",
+      "Codex (the Codex side of the ChatGPT desktop app, and Codex CLI), at the end of ~/.codex/config.toml:",
       ...codexTomlBlock(entry).trimEnd().split("\n").map((line) => `  ${line}`)
     ],
     ...more
@@ -142299,7 +142319,7 @@ var init_tools = __esm({
       "--max-shield / --max-unshield": "shield and unshield limits"
     };
     capName = (flag3) => CAP_NAMES[flag3] ?? "spending limit";
-    entryPlaces = (change) => `Where the entry is: Claude Desktop: claude_desktop_config.json; Cursor: ~/.cursor/mcp.json; Claude Code: claude mcp get ${MCP_SERVER_NAME} shows the entry (an entry added by hand can have another name: claude mcp list shows it), then claude mcp remove ${MCP_SERVER_NAME} and claude mcp add it again ${change}; Hermes: config.yaml.`;
+    entryPlaces = (change) => `Where the entry is: Claude Desktop: claude_desktop_config.json (Settings > Developer > Edit Config opens it); Cursor: ~/.cursor/mcp.json; Claude Code: claude mcp get ${MCP_SERVER_NAME} shows the entry (an entry added by hand can have another name: claude mcp list shows it), then claude mcp remove ${MCP_SERVER_NAME} and claude mcp add it again ${change}; Hermes: config.yaml.`;
     capRaiseText = (flag3) => {
       if (capFlagFromLaunchLine(flag3)) {
         const both = flag3 === "--max-payment" ? " (raise the 24-hour payment limit there too when it is below the new amount: the wallet does not start with it lower)" : "";
@@ -156835,7 +156855,13 @@ function claudeCodeState(env, home) {
 }
 function agentHostsOf(env, home) {
   const jsonHost = (target) => {
-    const config = readJsonFile(hostConfigFile(target, { env, home: homedir3() }));
+    let file;
+    try {
+      file = hostConfigFile(target, { env, home: homedir3() });
+    } catch {
+      return null;
+    }
+    const config = readJsonFile(file);
     return config === void 0 ? false : config === null ? null : runsThisWallet(config[hostServersKey(target)], home);
   };
   const continueHost = () => {
@@ -159631,7 +159657,7 @@ function agentAppLines({ skip = /* @__PURE__ */ new Set() }) {
 function hostLines(targets) {
   const commands = targets.map((target) => `${setupCli2()} setup --add-to ${target}`);
   const width = Math.max(...commands.map((command) => command.length));
-  const label = { codex: "Codex (the Codex app or Codex CLI)", devin: "Devin Desktop (the app that was Windsurf)", vscode: "VS Code (GitHub Copilot)" };
+  const label = { codex: "Codex (the ChatGPT desktop app's Codex side, or Codex CLI)", devin: "Devin Desktop (the app that was Windsurf)", vscode: "VS Code (GitHub Copilot)" };
   return targets.map((target, index) => `  ${commands[index].padEnd(width)}   ${label[target] ?? HOST_NAMES[target]}`);
 }
 function setupNextText({ home, deps, npmVersion, config, fundAsked, rerun, targets = [], added = /* @__PURE__ */ new Set() }) {
@@ -160057,6 +160083,17 @@ function claudeCodeEntryOf(deps) {
   }
 }
 var RESTART_APP = (app) => `If ${app} is open now, quit it and start it again.`;
+function hostAddedNext(target, app, platform) {
+  const ask = 'then ask in plain words, for example "what is my Shinjuku balance".';
+  if (target === "claude-desktop") {
+    const quit = platform === "win32" ? "If Claude Desktop is open now, quit it: right-click its icon by the clock and choose Quit (closing its window does not quit it). Then open it again" : platform === "darwin" ? "If Claude Desktop is open now, quit it (Claude > Quit Claude, or Command+Q) and open it again" : `${RESTART_APP(app).slice(0, -1)}`;
+    return `${quit}. In a new chat, click + and choose Connectors to see Shinjuku there, ${ask}`;
+  }
+  if (target === "codex") {
+    return `If the ChatGPT desktop app or Codex CLI is open now, quit it and start it again. In the app, use its Codex side (ChatGPT's own chat cannot start a server on this computer). In Codex, type /mcp to see the wallet's tools, ${ask}`;
+  }
+  return RESTART_APP(app);
+}
 function allowWalletChecks(deps) {
   const file = claudeCodeSettingsFile({ env: deps.env, home: deps.homedir() });
   try {
@@ -160190,8 +160227,16 @@ async function addToHosts(targets, home, deps, { force = false, npmVersion, ask,
 `));
       continue;
     }
-    const file = hostConfigFile(target, { ...options, home: deps.homedir() });
     const app = HOST_NAMES[target];
+    let file;
+    try {
+      file = hostConfigFile(target, { ...options, home: deps.homedir() });
+    } catch (error) {
+      if (!String(error?.message).startsWith("setup_host_config_ambiguous:")) throw error;
+      io.out(`Not added to ${app}: this computer has more than one ${app} settings file (${error.files.join("; ")}), so the wallet did not pick one. In ${app}, Settings > Developer > Edit Config opens the file it reads: add the entry below to it by hand.
+`);
+      continue;
+    }
     const first = torOn ? await hostStartCheck(app, options, deps, { terminal: false, noTor }) : void 0;
     if (first && !first.ok) {
       io.out(`Not added to ${app}: ${hostCheckWords(app, first)}
@@ -160205,8 +160250,8 @@ async function addToHosts(targets, home, deps, { force = false, npmVersion, ask,
 `);
       const check = await hostStartCheck(app, options, deps, { terminal: false, noTor });
       if (check.path) added = { ...write(mcpServerEntry({ ...options, path: check.path }), false), changed: true };
-      io.out(!added.changed ? `${app} already has the wallet: ${file} (nothing changed).${check.ok ? ` ${app} starts it (checked).` : ""}
-` : `Added the wallet to ${app}: ${file}${added.backup ? ` (the old file was copied to ${added.backup}, readable by you alone)` : ""}.${check.ok ? ` ${app} starts it (checked).` : ""} ${RESTART_APP(target === "codex" ? "the Codex app or Codex CLI" : app)}${target === "codex" ? ` In Codex, type /mcp to see the wallet's tools, then ask in plain words, for example "what is my Shinjuku balance".` : ""}
+      io.out(!added.changed ? `${app} already has the wallet: ${file} (nothing changed).${check.ok ? ` ${app} starts it (checked).` : ""} If ${app} does not show the wallet yet: ${hostAddedNext(target, app, options.platform)}
+` : `Added the wallet to ${app}: ${file}${added.backup ? ` (the old file was copied to ${added.backup}, readable by you alone)` : ""}.${check.ok ? ` ${app} starts it (checked).` : ""} ${hostAddedNext(target, app, options.platform)}
 `);
       if (!check.ok) io.out(`${hostCheckWords(app, check)}
 `);
@@ -161593,7 +161638,7 @@ var COMMANDS = [
       "Your own --passphrase-file must be private: on Linux and macOS setup refuses a file that group or other may read or write, or that another user owns (setup_passphrase_file_insecure: chmod 600 <file>). On Windows setup cannot read the access list; it accepts the file with a warning.",
       `--add-to writes each app's own user file: vscode (VS Code with Copilot) mcp.json in VS Code's User folder, under "servers"; devin (Devin Desktop, the app that was Windsurf) mcp_config.json in AppData\\Roaming\\devin on Windows, else ~/.config/devin; cline ~/.cline/data/settings/cline_mcp_settings.json (or CLINE_MCP_SETTINGS_PATH, CLINE_DATA_DIR, CLINE_DIR); continue its own block file ~/.continue/mcpServers/shinjuku.yaml (or in CONTINUE_GLOBAL_DIR); gemini (Gemini CLI) ~/.gemini/settings.json (or in GEMINI_CLI_HOME); antigravity (Antigravity) ~/.gemini/config/mcp_config.json. Every other key and server in a file stays as it is.`,
       `--add-to for a JSON file (Claude Desktop, Cursor and the apps above): a host config whose server list is not a JSON object, or that has a different ${MCP_SERVER_NAME} entry (without --force), is left alone. Otherwise the old file is copied to <file>.bak-<time> (mode 0600 on Linux and macOS; on Windows the folder's access list) and the new file replaces it in one rename. An entry an older setup wrote (no version, another version, or an old package name, shinjuku or shinjuku-shielded; the same home) is replaced without --force, in a JSON host and in Claude Code. An entry under an old key (${OLD_MCP_SERVER_NAMES.join(" or ")}) is replaced by itself, in every host, so the host never starts two wallet servers. For Claude Code, a different ${MCP_SERVER_NAME} server (not an older entry of this wallet) needs --force.`,
-      `--add-to codex: the Codex app and Codex CLI read one file, config.toml in CODEX_HOME (else ~/.codex). Setup writes the [mcp_servers.${MCP_SERVER_NAME}] tables at its end with startup_timeout_sec = 120 (a first start downloads the wallet) and tool_timeout_sec = 300, and keeps every other line; the same rules as a JSON host (a different entry stays without --force; the old file is backed up first). Then type /mcp in Codex to see the tools.`,
+      `--add-to codex: the ChatGPT desktop app (its Codex side) and Codex CLI read one file, config.toml in CODEX_HOME (else ~/.codex). Setup writes the [mcp_servers.${MCP_SERVER_NAME}] tables at its end with startup_timeout_sec = 120 (a first start downloads the wallet) and tool_timeout_sec = 300, and keeps every other line; the same rules as a JSON host (a different entry stays without --force; the old file is backed up first). Then type /mcp in Codex to see the tools.`,
       "The proof programs run natively: Windows x64, Linux x64 and Linux arm64 each download their own set (no WSL). Setup downloads the programs first and starts each one once before it makes a key; when Windows app control or an antivirus blocks one, setup stops and says which. macOS and other systems: not supported yet; setup says so and creates nothing.",
       "Run it again at any time: it never changes an existing wallet, keeps the recorded caps unless you pass new ones, checks every setup file again, downloads what is missing or newer, and rewrites config.json.",
       `A wallet that ${SETUP_CLI_WORD} restore made and did not read back yet (the restore stopped): setup reads its money back from the chain in place of the add-money question, so setup finishes that restore.`,