shinjuku-shielded 0.3.67 → 0.3.68

package/manifest.json

@@ -1,9 +1,9 @@
 {
   "schema": "carbon-shielded-wallet/bundle-manifest/v1",
   "file": "shinjuku-wallet.mjs",
-  "sha256": "4d9b6de27c68f9fb53c414d063679fde5a62eb26a2a46f13bebfde9a4d74b042",
-  "bytes": 12186827,
-  "sourceCommit": "fb9acd3df41de84537c71fc80913c41a37568bf4",
+  "sha256": "3d64f9b47b1139c42d3a2ff22642951710beeb669bf633b934b31419e94cc843",
+  "bytes": 12187129,
+  "sourceCommit": "8fd3e9152a6ef43a73769ded07e2cfa23c03615b",
   "sourceDirty": false,
   "installRecordMatchesLockfile": true,
   "releaseRule": "valid only when two fresh npm ci --ignore-scripts builds on different OSes give the same sha256; installRecordMatchesLockfile true means every entry npm installed equals its package-lock.json entry and every entry not marked optional, devOptional included, is installed: an optional entry (a package for another platform) may be absent",
@@ -1282,5 +1282,5 @@
       "version": "1.8.0"
     }
   ],
-  "publishedAt": "2026-10-22T12:44:47.481Z"
+  "publishedAt": "2026-10-22T13:57:14.597Z"
 }

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "shinjuku-shielded",
-  "version": "0.3.67",
+  "version": "0.3.68",
   "mcpName": "io.github.ShinjukuStaition/shinjuku-mcp",
   "description": "Shinjuku Shielded, the private x402 facilitator on Solana: the self-custody wallet CLI and its MCP server. Shield, pay, and unshield USDC from any MCP agent, under caps you set.",
-  "shinjukuRelease": "4d9b6de2",
-  "shinjukuSha256": "4d9b6de27c68f9fb53c414d063679fde5a62eb26a2a46f13bebfde9a4d74b042",
+  "shinjukuRelease": "3d64f9b4",
+  "shinjukuSha256": "3d64f9b47b1139c42d3a2ff22642951710beeb669bf633b934b31419e94cc843",
   "license": "SEE LICENSE IN LICENSE.txt",
   "author": "Shinjuku Shielded",
   "homepage": "https://github.com/ShinjukuStaition/shinjuku-mcp#readme",

package/shinjuku-wallet.mjs

@@ -65046,6 +65046,8 @@ var init_errorCodes = __esm({
       "quote_commitment_mismatch",
       "quote_expired",
       "quote_expired_before_submission",
+      // An idle float merge gave way to a buyer payment before its send (payResource deps.yieldBeforeSend).
+      "yielded_before_submission",
       "quote_life_short_requote",
       "quote_file_invalid_json",
       "quote_file_required",
@@ -98020,6 +98022,10 @@ async function payResourceOnce({
       walkHistory: finality.walkHistory
     });
     mark("submit-refused-checked");
+    if (record.refused === void 0 && deps.yieldBeforeSend?.() === true) {
+      mark("submit-yielded");
+      fail19("yielded_before_submission");
+    }
   }
   const landed = record.refused?.landed !== void 0;
   const shortHeader = record.state !== "submitted" && !landed ? await deps.memoUpload?.shortHeader(record.paymentHeader) : void 0;
@@ -102123,7 +102129,7 @@ function createAnchorReader({ connection, profile }) {
     if (requireCapacity && (state.terminal || state.paymentCount >= state.policy.maxPayments)) fail21("pool_not_ready");
     const chainTimestamp = clock2.data.readBigInt64LE(32);
     if (chainTimestamp < 0n) fail21("chain_clock_invalid");
-    const anchors = state.anchors.map((a) => ({ epoch: a.epoch, anchorIndex: a.index, anchorRoot: bigint(a.root) }));
+    const anchors = state.validAnchors.map((a) => ({ epoch: a.epoch, anchorIndex: a.index, anchorRoot: bigint(a.root) }));
     const current = anchors.find((a) => a.epoch === chainTimestamp / 300n);
     if (requireCapacity && !current) fail21("anchor_not_ready");
     const selected = current ?? anchors[0];