shinjuku-shielded 0.3.9 → 0.3.10

package/manifest.json

@@ -1,9 +1,9 @@
 {
   "schema": "carbon-shielded-wallet/bundle-manifest/v1",
   "file": "shinjuku-wallet.mjs",
-  "sha256": "701809bdf80ea16a9d16105f067998029d2a0f03d69b885720a08d806eae30d4",
-  "bytes": 10943907,
-  "sourceCommit": "88b144748643ad89029b53d4feeb52ee9b26f13a",
+  "sha256": "28f33853062c9982283f59bef13a6bb33b6ce474ea62c0d30ae6e0d473e66da2",
+  "bytes": 10945718,
+  "sourceCommit": "981ee2d7a103a8e3934a5e13cf3e7dccbc09b6c0",
   "sourceDirty": false,
   "installRecordMatchesLockfile": true,
   "releaseRule": "valid only when two fresh npm ci --ignore-scripts builds on different OSes give the same sha256; installRecordMatchesLockfile true means every entry npm installed equals its package-lock.json entry and every entry not marked optional, devOptional included, is installed: an optional entry (a package for another platform) may be absent",

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "shinjuku-shielded",
-  "version": "0.3.9",
+  "version": "0.3.10",
   "mcpName": "io.github.ShinjukuStaition/shinjuku-mcp",
   "description": "Shinjuku Shielded, the private x402 facilitator on Solana: the self-custody wallet CLI and its MCP server. Shield, pay, and unshield USDC from any MCP agent, under caps you set.",
-  "shinjukuRelease": "701809bd",
-  "shinjukuSha256": "701809bdf80ea16a9d16105f067998029d2a0f03d69b885720a08d806eae30d4",
+  "shinjukuRelease": "28f33853",
+  "shinjukuSha256": "28f33853062c9982283f59bef13a6bb33b6ce474ea62c0d30ae6e0d473e66da2",
   "license": "SEE LICENSE IN LICENSE.txt",
   "author": "Shinjuku Shielded",
   "homepage": "https://github.com/ShinjukuStaition/shinjuku-mcp#readme",

package/shinjuku-wallet.mjs

@@ -50517,11 +50517,15 @@ var init_chain2 = __esm({
       // Production E1 pool 45mh (since the tag-28 window): the same proxy
       // (UNDERMARKET_HISTORY_PROXY_POOLS = AAG16,45mh). AAG16 stays: an old
       // wallet home still reads its retired pool.
-      "45mhosfA2MuygZWeqYRVcEZX2Q3gA8KR8FwP6AZkK1zR": "http://d6xg3phhurxhzqcsgh2mh52yf744labhrnd7mducwynlertfsjzyslqd.onion/"
+      "45mhosfA2MuygZWeqYRVcEZX2Q3gA8KR8FwP6AZkK1zR": "http://d6xg3phhurxhzqcsgh2mh52yf744labhrnd7mducwynlertfsjzyslqd.onion/",
+      // Production E1 pool F7MW (since 2026-10-12): the same proxy serves it beside 45mh, which
+      // stays while its wallets move out (the move walks 45mh).
+      F7MWGF8vG8Bv3Y4pRRFqky5YzZndGtQaUXbMMvpmtoRV: "http://d6xg3phhurxhzqcsgh2mh52yf744labhrnd7mducwynlertfsjzyslqd.onion/"
     });
     PINNED_HISTORY_HTTPS = Object.freeze({
       AAG16mNWTtC1sBeu2tTVTwWjqWXCefLTCByVPj5X3kV8: "https://pay.shinjukustaition.com/history-proxy/",
-      "45mhosfA2MuygZWeqYRVcEZX2Q3gA8KR8FwP6AZkK1zR": "https://pay.shinjukustaition.com/history-proxy/"
+      "45mhosfA2MuygZWeqYRVcEZX2Q3gA8KR8FwP6AZkK1zR": "https://pay.shinjukustaition.com/history-proxy/",
+      F7MWGF8vG8Bv3Y4pRRFqky5YzZndGtQaUXbMMvpmtoRV: "https://pay.shinjukustaition.com/history-proxy/"
     });
     HISTORY_RPC_OWN = "own";
     historyRpcErrors = /* @__PURE__ */ new WeakSet();
@@ -61582,7 +61586,9 @@ var init_errorCodes = __esm({
       "move_body_invalid",
       "move_liquidity_wait",
       "move_payer_unavailable_retry_later",
+      "move_payment_in_flight",
       "move_pool_not_draining",
+      "move_quote_open",
       "move_refund_to_invalid",
       "move_to_pool_unknown",
       "move_unknown",
@@ -116601,14 +116607,15 @@ var NPX_PACKAGE = "shinjuku-shielded";
 var MCP_SERVER_NAME = "shinjuku-shielded";
 var P03_BINDING2 = "carbon-shielded-exact/svm-v3";
 var PRODUCTION = Object.freeze({
-  pool: "45mhosfA2MuygZWeqYRVcEZX2Q3gA8KR8FwP6AZkK1zR",
+  pool: "F7MWGF8vG8Bv3Y4pRRFqky5YzZndGtQaUXbMMvpmtoRV",
   program: "8PYPw3FSFTMbvSneXdcoH6jNoN4VD23nHwPY2A2riUy1",
   network: "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
   asset: "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
   memoService: DEFAULT_FACILITATOR_ORIGIN
 });
 var RETIRED_POOLS = Object.freeze({
-  AAG16mNWTtC1sBeu2tTVTwWjqWXCefLTCByVPj5X3kV8: "45mhosfA2MuygZWeqYRVcEZX2Q3gA8KR8FwP6AZkK1zR"
+  // Setup moves an AAG16 config.json to the pool the facilitator runs NOW (setup.mjs compares with the release's pool).
+  AAG16mNWTtC1sBeu2tTVTwWjqWXCefLTCByVPj5X3kV8: "F7MWGF8vG8Bv3Y4pRRFqky5YzZndGtQaUXbMMvpmtoRV"
 });
 function retiredPoolText(pool) {
   const next = RETIRED_POOLS[pool];
@@ -116875,6 +116882,7 @@ var TIMEOUT_MS = 3e4;
 var HEX642 = /^[0-9a-f]{64}$/;
 var DIR = /^[0-9a-f]{8}$/;
 var BASE58_KEY2 = /^[1-9A-HJ-NP-Za-km-z]{32,44}$/;
+var V3_ONION_KEY = /^http:\/\/[a-z2-7]{56}\.onion(\/|$)/;
 var ED25519_SPKI_PREFIX3 = Buffer.from("302a300506032b6570032100", "hex");
 var fail21 = (code, detail) => new Error(`${code}: ${detail}`);
 function canonicalJson(value) {
@@ -116913,8 +116921,8 @@ function checkBody(body) {
     } catch {
       key = void 0;
     }
-    if (!key || !key.startsWith("https://") && !/^http:\/\/(127\.0\.0\.1|localhost)(:|\/|$)/.test(key)) {
-      throw fail21("wallet_channel_invalid", "a channel proof-tool set names a facilitator that is not an https URL");
+    if (!key || !key.startsWith("https://") && !V3_ONION_KEY.test(key) && !/^http:\/\/(127\.0\.0\.1|localhost)(:|\/|$)/.test(key)) {
+      throw fail21("wallet_channel_invalid", "a channel proof-tool set names a facilitator that is not an https URL or a v3 onion");
     }
     return Object.freeze({ facilitator: key, pool: set.pool, dir: set.dir, sumsSha256: set.sumsSha256 });
   });
@@ -117073,8 +117081,8 @@ function channelListsSet(body, { facilitator, pool, dir, sumsSha256 }) {
 // wallet/src/setup/proofTools.mjs
 var PINNED_PROOF_TOOLS = Object.freeze({
   [DEFAULT_FACILITATOR_ORIGIN]: Object.freeze({
-    dir: "47678912",
-    sumsSha256: "47678912949d7da8b705c399edf03d2367465f6eb581b00a059356373baed28e"
+    dir: "5bed238f",
+    sumsSha256: "5bed238f3696208ca3a8e66d206e5fffc85f1823e959abe1901c2d57c17bcdf3"
   })
 });
 var UPDATE_NEXT = "update the wallet: npx -y shinjuku-shielded@latest setup";
@@ -119548,7 +119556,11 @@ var MOVE_SERVER_CODES = Object.freeze([
   "move_payer_unavailable_retry_later",
   "move_liquidity_wait",
   "move_unknown",
-  "pool_draining"
+  "pool_draining",
+  // 409s of an UNPAID leg (production 2026-10-12 20:48Z: a re-quote of the same body met the open quote and the leg failed
+  // challenge_missing:409). Both mean "this body is quoted or being paid now"; the leg waits with the same body.
+  "move_quote_open",
+  "move_payment_in_flight"
 ]);
 var hash11 = (value) => sha256Hex2(Buffer.from(value, "utf8"));
 var sum = (values) => values.reduce((total, value) => total + BigInt(value ?? 0), 0n);
@@ -119826,6 +119838,13 @@ function refusalOf(serverCode3) {
       return { code: "wallet_move_payer_busy_retry_later", transient: true };
     case "move_liquidity_wait":
       return { code: "wallet_move_payer_busy_retry_later", transient: true };
+    // The drain holds an open quote for this exact body until its validBefore + 60 s: ask again after that, same body.
+    case "move_quote_open":
+      return { code: "wallet_move_leg_paused", transient: true };
+    // Only an unpaid request reaches here (moveFetch passes every request that carries payment bytes), so this wallet
+    // holds no bytes for the leg: it never asks for a new quote to pay; it keeps the leg and asks again later.
+    case "move_payment_in_flight":
+      return { code: "wallet_move_leg_paused", transient: true };
     case "pool_draining":
       return { code: "wallet_move_route_missing", transient: true };
     case "move_pool_not_draining":
@@ -120051,10 +120070,11 @@ async function runMove({
           if (seen.refusal) {
             const refusal2 = refusalOf(seen.refusal);
             if (unsent && !refusal2.transient) open3(sourcePath, passphrase2).removeWal(moveWalName(from.pool, leg.n));
-            log(`MOVE_LEG_REFUSED n=${leg.n} ${seen.refusal}`);
+            log(`${refusal2.transient ? "MOVE_LEG_WAIT" : "MOVE_LEG_REFUSED"} n=${leg.n} ${seen.refusal}`);
             return answer(refusal2.transient ? "waiting" : "failed", refusal2.code, { ...base, serverCode: seen.refusal });
           }
           const code = firstCode4(error);
+          const shown = /^[a-z0-9_]+:[0-9]{3}(?=$|[\s;(])/.exec(String(error?.message ?? ""))?.[0] ?? code;
           if (LEG_REFUSED_CODES.has(code)) {
             save2({ state: "refused", code, refusedAtMs: now() });
             log(`MOVE_LEG_REFUSED n=${leg.n} ${code}`);
@@ -120065,8 +120085,8 @@ async function runMove({
             return answer("waiting", "wallet_move_leg_paused", { ...base, payCode: code });
           }
           if (unsent) open3(sourcePath, passphrase2).removeWal(moveWalName(from.pool, leg.n));
-          log(`MOVE_LEG_FAILED n=${leg.n} ${code}`);
-          return answer(unsent ? "failed" : "waiting", unsent ? "wallet_move_leg_failed" : "wallet_move_leg_paused", { ...base, payCode: code });
+          log(`MOVE_LEG_FAILED n=${leg.n} ${shown}`);
+          return answer(unsent ? "failed" : "waiting", unsent ? "wallet_move_leg_failed" : "wallet_move_leg_paused", { ...base, payCode: shown });
         }
         save2({ state: "paid", paidAtMs: now(), ...isSolanaSignature(result?.receipt?.transaction) ? { settleTransaction: result.receipt.transaction } : {} });
         log(`MOVE_LEG_PAID n=${leg.n}`);
@@ -128221,7 +128241,7 @@ var CLI2 = "shinjuku-wallet";
 var P03_BINDING3 = "carbon-shielded-exact/svm-v3";
 var GUIDE = Object.freeze({
   program: "8PYPw3FSFTMbvSneXdcoH6jNoN4VD23nHwPY2A2riUy1",
-  pool: "45mhosfA2MuygZWeqYRVcEZX2Q3gA8KR8FwP6AZkK1zR",
+  pool: "F7MWGF8vG8Bv3Y4pRRFqky5YzZndGtQaUXbMMvpmtoRV",
   mint: "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
   network: "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
   facilitator: DEFAULT_FACILITATOR_ORIGIN
@@ -130447,7 +130467,9 @@ var RELAYED_DEPOSIT_UNIT = Object.freeze({
   DFCCPHdw7pH9vKk9FEN9z6cy9M1UKjF168j7HfLwxYk3: "1000000",
   AAG16mNWTtC1sBeu2tTVTwWjqWXCefLTCByVPj5X3kV8: "1000000",
   // The production E1 pool since the tag-28 window (its pool plan: poolDenominationAtomic 1000000).
-  "45mhosfA2MuygZWeqYRVcEZX2Q3gA8KR8FwP6AZkK1zR": "1000000"
+  "45mhosfA2MuygZWeqYRVcEZX2Q3gA8KR8FwP6AZkK1zR": "1000000",
+  // The production E1 pool since 2026-10-12 (GET /api/x402/deposit: depositUnitAtomic 1000000).
+  F7MWGF8vG8Bv3Y4pRRFqky5YzZndGtQaUXbMMvpmtoRV: "1000000"
 });
 async function runDeposit(args, values, deps) {
   const unit = values.has("--relay") && !values.has("--pool-denomination") ? RELAYED_DEPOSIT_UNIT[values.get("--pool")] : void 0;