shinjuku-shielded 0.3.177 → 0.3.178

package/README.md

@@ -6,13 +6,13 @@ answers privately, in a terminal chat or for your agent app. Its `mcp`
 command runs a local MCP server (stdio) for your agent. Your keys never
 leave your machine.
 
-This is version 0.3.177. The npm packages `shinjuku-shield` and
+This is version 0.3.178. The npm packages `shinjuku-shield` and
 `shinjuku-shielded` hold the same files. The command is `shinjuku`.
 
 ## Set up
 
 ```sh
-npx -y shinjuku@0.3.177 setup
+npx -y shinjuku@0.3.178 setup
 ```
 
 Setup offers to install the `shinjuku` command and, on Windows, adds npm's
@@ -35,13 +35,13 @@ Every wallet command works after `shinjuku`, for example `shinjuku balance`,
 Claude Code:
 
 ```sh
-claude mcp add --scope user shinjuku -- npx -y --no-audit --no-fund shinjuku-shield@0.3.177 mcp
+claude mcp add --scope user shinjuku -- npx -y --no-audit --no-fund shinjuku-shield@0.3.178 mcp
 ```
 
 Claude Desktop (`claude_desktop_config.json`) or Cursor (`~/.cursor/mcp.json`):
 
 ```json
-{ "mcpServers": { "shinjuku": { "command": "npx", "args": ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.177", "mcp"] } } }
+{ "mcpServers": { "shinjuku": { "command": "npx", "args": ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.178", "mcp"] } } }
 ```
 
 On native Windows, if the host cannot find `npx`, use `"command": "cmd"` and
@@ -54,7 +54,7 @@ Codex (the Codex app and Codex CLI read the same file, `~/.codex/config.toml`):
 ```toml
 [mcp_servers.shinjuku]
 command = "npx"
-args = ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.177", "mcp"]
+args = ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.178", "mcp"]
 startup_timeout_sec = 120
 tool_timeout_sec = 300
 ```

package/manifest.json

@@ -1,9 +1,9 @@
 {
   "schema": "carbon-shielded-wallet/bundle-manifest/v1",
   "file": "shinjuku-wallet.mjs",
-  "sha256": "8d9526ec3aa19b0a648557fb5ccb8568e7988f91bab9b208767fb00a50c8b71f",
-  "bytes": 9405041,
-  "sourceCommit": "a2e92102622963218d6222d6f5c18c46b858fb3b",
+  "sha256": "ab594bac31fc1416d01a6b552a820a8b35f99418b00d66bffd63991692a3f5c6",
+  "bytes": 9406427,
+  "sourceCommit": "7f0ed64412e94ac55a02cd50638480718c73f72b",
   "sourceDirty": false,
   "installRecordMatchesLockfile": true,
   "releaseRule": "valid only when two fresh npm ci --ignore-scripts builds on different OSes give the same sha256; installRecordMatchesLockfile true means every entry npm installed equals its package-lock.json entry and every entry not marked optional, devOptional included, is installed: an optional entry (a package for another platform) may be absent",
@@ -1038,5 +1038,5 @@
       "version": "1.8.0"
     }
   ],
-  "publishedAt": "2026-11-06T00:45:28.350Z"
+  "publishedAt": "2026-11-06T01:20:35.699Z"
 }

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "shinjuku-shielded",
-  "version": "0.3.177",
+  "version": "0.3.178",
   "mcpName": "io.github.ShinjukuStaition/shinjuku-mcp",
   "description": "Shinjuku Shielded, the private x402 facilitator on Solana: the self-custody wallet CLI and its MCP server. Shield, pay, and unshield USDC from any MCP agent, under caps you set.",
-  "shinjukuRelease": "8d9526ec",
-  "shinjukuSha256": "8d9526ec3aa19b0a648557fb5ccb8568e7988f91bab9b208767fb00a50c8b71f",
+  "shinjukuRelease": "ab594bac",
+  "shinjukuSha256": "ab594bac31fc1416d01a6b552a820a8b35f99418b00d66bffd63991692a3f5c6",
   "license": "SEE LICENSE IN LICENSE.txt",
   "author": "Shinjuku Shielded",
   "homepage": "https://github.com/ShinjukuStaition/shinjuku-shield#readme",

package/shinjuku-wallet.mjs

@@ -144975,7 +144975,7 @@ function moneyOptions({
     } catch {
       canonical5 = false;
     }
-    if (!canonical5) throw new Error("mcp_unshield_to_invalid: every send address approved at start must be a base58 Solana address (the value given is not repeated here); the MCP server did not start and nothing was moved");
+    if (!canonical5) throw new Error("mcp_unshield_to_invalid: every send address approved at start must be a base58 Solana address (the value given is not repeated here); the wallet did not start for your AI app and nothing was moved");
   }
   const unshieldCap = asText(maxUnshieldAtomic);
   if (unshieldCap && !POSITIVE_ATOMIC7.test(unshieldCap)) setupInvalid("the unshield limit must be a positive whole number of atomic units");
@@ -145158,7 +145158,7 @@ async function openWalletServer({
   if (!POSITIVE_ATOMIC7.test(asText(maxPaymentAtomic))) capRequired("the limit per payment (the most one payment may cost; maxPaymentAtomic, in atomic units) is required and must be a positive whole number");
   if (!POSITIVE_ATOMIC7.test(asText(maxSessionAtomic))) capRequired("the limit in total (the most this MCP process may pay in total; maxSessionAtomic, in atomic units) is required and must be a positive whole number");
   if (BigInt(asText(maxSessionAtomic)) < BigInt(asText(maxPaymentAtomic))) {
-    throw new Error(`mcp_cap_invalid: the limit in total must be at least the limit per payment (${usdcFlagText(asText(maxSessionAtomic))} USDC in total is below ${usdcFlagText(asText(maxPaymentAtomic))} USDC per payment); the MCP server did not start and nothing was paid. For example: ${oneTimeCommandLine("mcp --max-payment 0.05 --max-session 0.2")}`);
+    throw new Error(`mcp_cap_invalid: the limit in total must be at least the limit per payment (${usdcFlagText(asText(maxSessionAtomic))} USDC in total is below ${usdcFlagText(asText(maxPaymentAtomic))} USDC per payment); the wallet did not start for your AI app and nothing was paid. For example: ${oneTimeCommandLine("mcp --max-payment 0.05 --max-session 0.2")}`);
   }
   const readyText = asText(readyPockets);
   if (readyText && !/^[0-5]$/.test(readyText)) setupInvalid("the number of ready pockets must be a whole number from 0 to 5");
@@ -145822,10 +145822,10 @@ var init_stdioServer = __esm({
     LAUNCH_NOTICE_TOOLS = Object.freeze(["wallet_balance", "wallet_status"]);
     withLaunchLine = (instructions2, line) => !line ? instructions2 : () => `${typeof instructions2 === "function" ? instructions2() : instructions2} Tell the user: ${line}`;
     capRequired = (detail) => {
-      throw new Error(`mcp_cap_required: ${detail}; the MCP server did not start. Start it with both limits, for example (0.05 USDC per payment, 0.20 USDC in total): ${oneTimeCommandLine("mcp --max-payment 0.05 --max-session 0.2")}`);
+      throw new Error(`mcp_cap_required: ${detail}; the wallet did not start for your AI app. Start it with both limits, for example (0.05 USDC per payment, 0.20 USDC in total): ${oneTimeCommandLine("mcp --max-payment 0.05 --max-session 0.2")}`);
     };
     setupInvalid = (detail) => {
-      throw new Error(`mcp_setup_invalid: ${detail}; the MCP server did not start and nothing was moved`);
+      throw new Error(`mcp_setup_invalid: ${detail}; the wallet did not start for your AI app and nothing was moved`);
     };
     TOOL_ROOTS_WAIT_MS = 6e4;
     ROOTS_FREE_TOOLS = /* @__PURE__ */ new Set(["pay_for_service", "inference_chat", "inference_models", "inference_server", "check_price", "find_paid_services"]);
@@ -158026,8 +158026,13 @@ var NEXT = /^(Next|Status|Home|Then): ?(.*)$/;
 var NPM_COMMAND = String.raw`npm(?= (?:install|i|uninstall|ci|cache|config|prefix|root|bin|exec|run|view|ls|update|set|get|-\S*)(?:\s|$))`;
 var SHINJUKU_COMMAND = String.raw`shinjuku(?= (?:add-funds|backup-export|backup-verify|balance|buy-item|cancel|chat|curl|deposit[a-z-]*|funds-status|help|infer|init|keep-warm|limits|mcp|move|own-address|pay|pay-me|prepare|recover|restore|seller[a-z-]*|setup[a-z-]*|transfer-token|unshield[a-z-]*|version)(?:\s|$))`;
 var COMMAND_PROGRAM = String.raw`(?:npx|${NPM_COMMAND}|iwr|${SHINJUKU_COMMAND}|hermes|claude|codex|cursor|chmod|chown|wsl|Stop-Process|powershell|cmd|tor)`;
-var WHOLE_LINE_SIGNS = new RegExp(String.raw`^\s*(?:${COMMAND_PROGRAM}(?= |$)|[&$]|["{}\[\]]|- |[A-Za-z_][\w.-]* = )|^\s+[A-Za-z_][\w.-]*:(?: |$)`);
+var WHOLE_LINE_SIGNS = new RegExp(String.raw`^\s*(?:${COMMAND_PROGRAM}(?= |$)|[&$]|["{}\[\]]|- |[A-Za-z_][\w.-]*[ \t]*=)|^\s+[A-Za-z_][\w.-]*:(?: |$)`);
 var CODE_TOKEN2 = /^(?:-|[^\s,;()]*[=@\\/:])/;
+var CONFIG_LINE = /^\s*(?:["{}\[\]]|- |[A-Za-z_][\w.-]*[ \t]*=)|^\s+[A-Za-z_][\w.-]*:(?: |$)/;
+var COLUMN_ROW = /^([ \t]+)(\S+(?: \S+)*?)( {2,})(\S.*)$/;
+var ROW_GAP = 3;
+var PATH_START = /(?:^|\s)(?:[A-Za-z]:\\|\\\\|~\/|\/)/;
+var CODE_WORDS = /(?:^|\s)-|[\\\/=@`"]/;
 var UNIT_PATTERNS = [
   // A command program and up to six words after it, to the next , ; ( ); while its words hold code (a flag, a path, =, @
   // or :), it goes on to the next such sign or the end (Claude Code's "with command: cmd /c npx ... mcp to user config").
@@ -158085,18 +158090,24 @@ function wrapWords(text3, firstPrefix, restPrefix, width) {
   return pieces;
 }
 function wrapSetupLine(line, paint2, width) {
-  if (!width || line.startsWith("\r") || columnsOf3(line) <= width || line.includes("\x1B[") || wholeLine(line) || PROGRESS.test(line)) return void 0;
-  const label = LABEL.exec(line);
-  if (label) {
-    const head = `  ${label[1]}${label[2]}`;
-    const under = " ".repeat(columnsOf3(head));
-    const pieces2 = wrapWords(label[3], head, under, width);
-    if (pieces2.length < 2) return void 0;
-    return [
-      paint2([["  ", ""], [label[1] + label[2], "mute"], [pieces2[0], "bone"]]),
-      ...pieces2.slice(1).map((piece) => paint2([[under, ""], [piece, "bone"]]))
-    ].join("\n");
-  }
+  if (!width || line.startsWith("\r") || columnsOf3(line) <= width || line.includes("\x1B[") || PROGRESS.test(line)) return void 0;
+  const row = !CONFIG_LINE.test(line) && COLUMN_ROW.exec(line);
+  const isRow = row && !PATH_START.test(row[2]) && (!wholeLine(line) || row[3].length >= ROW_GAP && wholeLine(row[2]) && !CODE_WORDS.test(row[4]));
+  if (isRow) {
+    const [, indent2, first2, gap, about] = row;
+    const head = `${indent2}${first2}${gap}`;
+    const cls = COMMAND.test(line) ? "brass" : LABEL.test(line) ? "bone" : "dim";
+    const firstWord = /^\S+/.exec(about)[0];
+    if (columnsOf3(`${head}${firstWord}`) <= width) {
+      const under = " ".repeat(columnsOf3(head));
+      const pieces3 = wrapWords(about, head, under, width);
+      if (pieces3.length < 2) return void 0;
+      return [paintSetupLine(`${head}${pieces3[0]}`, paint2), ...pieces3.slice(1).map((piece) => paint2([[under, ""], [piece, cls]]))].join("\n");
+    }
+    const pieces2 = wrapWords(about, indent2, indent2, width);
+    return [paintSetupLine(`${indent2}${first2}`, paint2), ...pieces2.map((piece) => paint2([[indent2, ""], [piece, cls]]))].join("\n");
+  }
+  if (wholeLine(line)) return void 0;
   const indent = /^[ \t]*/.exec(line)[0];
   const body = line.slice(indent.length);
   const kind = indent ? { cls: "dim" } : DONE.test(line) ? { mark: ["\u25C6 ", "crim"], cls: "verm" } : FAIL.test(line) ? { mark: ["\u25CB ", "crim"], cls: "crim" } : WARN.test(line) ? { mark: ["! ", "verm"], cls: "verm" } : STEP.test(line) ? { mark: ["\u25C6 ", "crim"], cls: "bone" } : NEXT.test(line) ? { cls: "bone", next: true } : { cls: "dim" };
@@ -160561,7 +160572,7 @@ async function runChatCommand(values, deps) {
 function validateMcp(values, env) {
   validatePayerSession("mcp", values, env);
   if (BigInt(values.get("--max-session")) < BigInt(values.get("--max-payment"))) {
-    throw new PublicFailure(`mcp_cap_invalid: --max-session must be at least --max-payment (--max-session ${usdcFlagText(values.get("--max-session"))} is below --max-payment ${usdcFlagText(values.get("--max-payment"))}, in USDC); the MCP server did not start and nothing was paid`);
+    throw new PublicFailure(`mcp_cap_invalid: --max-session must be at least --max-payment (--max-session ${usdcFlagText(values.get("--max-session"))} is below --max-payment ${usdcFlagText(values.get("--max-payment"))}, in USDC); the wallet did not start for your AI app and nothing was paid`);
   }
   if (values.has("--no-shield") && values.has("--allow-shield")) throw new UsageError("--no-shield and --allow-shield contradict each other: pass one (wallet_shield is on by default)");
   if (values.has("--no-shield") && values.has("--max-shield")) throw new UsageError("--max-shield caps wallet_shield, which --no-shield turns off: pass one");
@@ -160935,7 +160946,7 @@ async function runMcp2(values, deps) {
     const { code: code2, started } = await torRunOf(["mcp", ...values.get(MCP_RAW_ARGS), ...tunnel ? ["--proxy", tunnel] : []], deps);
     if (code2 === 0) return void 0;
     if (started) {
-      throw new PublicFailure(`wallet_command_failed: the MCP server ran behind Tor and then ended with exit code ${code2}; its own message is above. Tor was running when it started, so this is not a Tor failure, and nothing fell back to a direct connection. Fix what that message says, then start mcp again`);
+      throw new PublicFailure(`wallet_command_failed: the wallet for your AI app ran behind Tor and then ended with exit code ${code2}; its own message is above. Tor was running when it started, so this is not a Tor failure, and nothing fell back to a direct connection. Fix what that message says, then start mcp again`);
     }
     const configPath2 = join48(torHome, "config.json");
     if (deps.stdinIsTTY()) {
@@ -160946,9 +160957,9 @@ async function runMcp2(values, deps) {
         now = { answer: false };
       }
       if (now.answer === "too_old") {
-        throw new PublicFailure("mcp_tor_unavailable: your Tor program is too old, so the MCP server did not start and nothing was paid. Its message above has the command that installs a newer Tor; then start mcp again");
+        throw new PublicFailure("mcp_tor_unavailable: your Tor program is too old, so the wallet did not start for your AI app and nothing was paid. Its message above has the command that installs a newer Tor; then start mcp again");
       }
-      throw new PublicFailure(`mcp_tor_unavailable: your private connection (Tor) is not running, so the MCP server did not start and nothing was paid (the Tor run of mcp ended with exit code ${code2}; its message is above). ` + (process.platform === "win32" ? "Then start it again." : torStartText("start mcp again", { tunnel: recordedTunnelUrl(configPath2) })));
+      throw new PublicFailure(`mcp_tor_unavailable: your private connection (Tor) is not running, so the wallet did not start for your AI app and nothing was paid (the Tor run of mcp ended with exit code ${code2}; its message is above). ` + (process.platform === "win32" ? "Then start it again." : torStartText("start mcp again", { tunnel: recordedTunnelUrl(configPath2) })));
     }
     await deps.mcpTorDownMain({ exitCode: code2, configPath: configPath2 });
     return void 0;
@@ -161168,13 +161179,13 @@ async function runMcpFirstRun(values, deps) {
 ` : "Shinjuku Shield is not set up on this machine yet (no config.json, wallet, passphrase file, or setup files).\n");
     const answer = String(await deps.ask("Set up Shinjuku Shield now? (y/n) ")).trim();
     if (!/^y(es)?$/i.test(answer)) {
-      throw new PublicFailure(`mcp_not_set_up: the wallet is not set up, so the MCP server did not start and nothing was created; when you are ready, run:
+      throw new PublicFailure(`mcp_not_set_up: the wallet is not set up, so the wallet did not start for your AI app and nothing was created; when you are ready, run:
   ${setupCli2()} setup`);
     }
     const setupValues = new Map(Object.entries(setupOptionsOf(values, home)).filter(([key]) => key !== "home").map(([key, value2]) => [`--${key.replace(/[A-Z]/g, (c) => `-${c.toLowerCase()}`)}`, value2]));
     await runSetupCommand(setupValues, deps);
     const after = mcpValuesAfterSetup(values, home, deps);
-    io.err("Setup is done. The MCP server starts now on this terminal (an agent host normally starts it; Ctrl-C stops it).\n");
+    io.err("Setup is done. The wallet now runs in this terminal for an AI app (your AI app normally starts it by itself; Ctrl-C stops it).\n");
     return runMcp2(after.values, after.deps);
   }
   let warm;
@@ -161858,10 +161869,19 @@ function claudeCodeEntryOf(deps) {
     return void 0;
   }
 }
-function runClaude(args, program = "claude", stdio = "inherit") {
-  const options = { stdio, windowsHide: true, timeout: 12e4 };
+var CLAUDE_SAID_CHARS = 2e3;
+function runClaude(args, program = "claude", stdio = "inherit", sink) {
+  const options = {
+    stdio: sink ? ["ignore", "pipe", "pipe"] : stdio,
+    windowsHide: true,
+    timeout: 12e4,
+    ...sink ? { encoding: "utf8", maxBuffer: 64 * 1024 * 1024 } : {}
+  };
   const programWord = program === "claude" ? program : `"${program}"`;
   const result = process.platform === "win32" && !/\.exe$/i.test(program) ? spawnSync11([programWord, ...args.map((word2) => hostShellWord(word2, "win32"))].join(" "), { ...options, shell: true }) : spawnSync11(program, args, options);
+  if (sink) sink.text = `${result.stdout ?? ""}
+${result.stderr ?? ""}${result.error ? `
+${result.error.message}` : ""}`.trim().slice(-CLAUDE_SAID_CHARS);
   return result.status ?? 1;
 }
 function claudeRemoveLines(program, platform) {
@@ -161993,7 +162013,8 @@ ${claudeCodeLines({ ...claudeOptions, claudeProgram }).map((line) => `  ${line}`
         continue;
       }
       const quiet = (args) => (deps.runClaudeCliQuiet ?? deps.runClaudeCli)(args, claudeProgram);
-      const runClaudeCli = (args) => deps.runClaudeCli(args, claudeProgram);
+      const said = {};
+      const runClaudeCli = (args) => deps.runClaudeCli(args, claudeProgram, said);
       for (const old of OLD_MCP_SERVER_NAMES) {
         if (quiet(["mcp", "remove", "--scope", "user", old]) === 0) io.out(`Replaced the old ${old} entry in Claude Code.
 `);
@@ -162022,7 +162043,8 @@ ${claudeCodeLines({ ...claudeOptions, claudeProgram }).map((line) => `  ${line}`
       if (status === 0) done.add(target);
       const homeNow = replacedOther ? ` Claude Code now uses the wallet in ${home}; the wallet in ${otherHome} is unchanged.` : "";
       io.out(status === 0 ? `${removed ? "Replaced the wallet in" : "Added the wallet to"} Claude Code, for all your folders.${homeNow} ${allowWalletChecks(deps).say} ${RESTART_APP("Claude Code")}${noStartFolderWords(target, mcpServerEntry(options))}
-` : `Claude Code did not take the server; its message is above. Run this yourself:
+` : `Claude Code did not add the wallet${said.text ? `. Claude Code said: ${said.text}` : ""}
+Run this yourself:
 ${claudeCodeLines({ ...claudeOptions, claudeProgram }).map((line) => `  ${line}`).join("\n")}
 ` + (removed ? `Setup removed the old ${MCP_SERVER_NAME} entry first, so Claude Code has none until that line runs.
 ` : `If it says the server already exists, remove that entry with this command, then run the line above:
@@ -163479,7 +163501,7 @@ var COMMANDS = [
   },
   {
     name: "mcp",
-    summary: "Run a local MCP server (stdio) that lets an agent pay x402 URLs from your private balance, under caps you set.",
+    summary: "Run the wallet for an AI app on this computer, so the app can pay websites from your private balance, under caps you set.",
     env: [],
     flags: [
       flag2("--max-payment", "<usdc>", "optional: the most one payment may cost, in USDC (0.05 = 5 cents); a tool argument can only lower it. Default no limit", { check: "atomic", usdc: true }),
@@ -167364,7 +167386,7 @@ function defaultDependencies() {
     }),
     /** claude with no output on the terminal (setup's probe of an old entry, and its remove); the exit status. */
     runClaudeCliQuiet: (args, program) => runClaude(args, program, "ignore"),
-    runClaudeCli: (args, program) => runClaude(args, program, "inherit"),
+    runClaudeCli: (args, program, sink) => runClaude(args, program, "inherit", sink),
     /**
      * The --tor entry of this CLI: re-execute `args` behind Tor (proxy.mjs proves Tor first). `startedFile`
      * (torRunOf) reaches the Tor run in its environment, which proxy.mjs copies from this process at the spawn.