shinjuku-shield 0.3.87 → 0.3.89

package/README.md

@@ -6,13 +6,13 @@ answers privately, in a terminal chat or for your agent app. Its `mcp`
 command runs a local MCP server (stdio) for your agent. Your keys never
 leave your machine.
 
-This is version 0.3.87. The npm packages `shinjuku-shield` and
+This is version 0.3.89. The npm packages `shinjuku-shield` and
 `shinjuku-shielded` hold the same files; `shinjuku` is the short command.
 
 ## Set up
 
 ```sh
-npx -y --no-audit --no-fund shinjuku-shield@0.3.87 setup
+npx -y --no-audit --no-fund shinjuku-shield@0.3.89 setup
 ```
 
 Setup makes the wallet on this machine, a private passphrase file, and the
@@ -24,7 +24,7 @@ server to that host's config.
 ## The `shinjuku` command
 
 ```sh
-npm install -g shinjuku@0.3.87
+npm install -g shinjuku@0.3.89
 shinjuku help
 ```
 
@@ -36,13 +36,13 @@ Every wallet command works after `shinjuku`, for example `shinjuku balance`,
 Claude Code:
 
 ```sh
-claude mcp add --scope user shinjuku-shielded -- npx -y --no-audit --no-fund shinjuku-shield@0.3.87 mcp
+claude mcp add --scope user shinjuku-shielded -- npx -y --no-audit --no-fund shinjuku-shield@0.3.89 mcp
 ```
 
 Claude Desktop (`claude_desktop_config.json`) or Cursor (`~/.cursor/mcp.json`):
 
 ```json
-{ "mcpServers": { "shinjuku-shielded": { "command": "npx", "args": ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.87", "mcp"] } } }
+{ "mcpServers": { "shinjuku-shielded": { "command": "npx", "args": ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.89", "mcp"] } } }
 ```
 
 On native Windows, if the host cannot find `npx`, use `"command": "cmd"` and

package/manifest.json

@@ -1,9 +1,9 @@
 {
   "schema": "carbon-shielded-wallet/bundle-manifest/v1",
   "file": "shinjuku-wallet.mjs",
-  "sha256": "c0b0b77bafa0cc4e15bd9c01e207c73b8188102f8ed1c9fe5e74e67c7bde008b",
-  "bytes": 12523149,
-  "sourceCommit": "d3e53e8aee2580ccfe7aee5fd957aea96457dc73",
+  "sha256": "9af59797297cdea3750a86cc8bc6287cab8952e4a8fc5da4bdb8d3e48ab2bd67",
+  "bytes": 12528864,
+  "sourceCommit": "5a32786bd0096a2a45135944a10dd1944ee4012d",
   "sourceDirty": false,
   "installRecordMatchesLockfile": true,
   "releaseRule": "valid only when two fresh npm ci --ignore-scripts builds on different OSes give the same sha256; installRecordMatchesLockfile true means every entry npm installed equals its package-lock.json entry and every entry not marked optional, devOptional included, is installed: an optional entry (a package for another platform) may be absent",
@@ -1282,5 +1282,5 @@
       "version": "1.8.0"
     }
   ],
-  "publishedAt": "2026-10-23T23:09:24.273Z"
+  "publishedAt": "2026-10-24T00:07:43.778Z"
 }

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "shinjuku-shield",
-  "version": "0.3.87",
+  "version": "0.3.89",
   "mcpName": "io.github.ShinjukuStaition/shinjuku-mcp",
   "description": "Shinjuku Shielded, the private x402 facilitator on Solana: the self-custody wallet CLI and its MCP server. Shield, pay, and unshield USDC from any MCP agent, under caps you set.",
-  "shinjukuRelease": "c0b0b77b",
-  "shinjukuSha256": "c0b0b77bafa0cc4e15bd9c01e207c73b8188102f8ed1c9fe5e74e67c7bde008b",
+  "shinjukuRelease": "9af59797",
+  "shinjukuSha256": "9af59797297cdea3750a86cc8bc6287cab8952e4a8fc5da4bdb8d3e48ab2bd67",
   "license": "SEE LICENSE IN LICENSE.txt",
   "author": "Shinjuku Shielded",
   "homepage": "https://github.com/ShinjukuStaition/shinjuku-mcp#readme",

package/shinjuku-wallet.mjs

@@ -47011,6 +47011,14 @@ async function proveProxy(mode, proxy) {
     throw new Error(`proxy_not_answering: ${address5} did not carry a request to ${TOR_CHECK}, so nothing was sent. Check the proxy and rerun`);
   }
 }
+function plainTorTrouble(text3, said = TOR_TROUBLE_SAID) {
+  const line = String(text3).replace(/\r?\n$/, "");
+  if (!/^(?:tor|rpc|history|memo service): /.test(line) || !TOR_TROUBLE_LINE.test(line) || /\bWARNING\b/.test(line)) return void 0;
+  const plain = TOR_TROUBLE_PLAIN.find(([kind]) => kind.test(line))?.[1] ?? TOR_WAIT_PLAIN;
+  if (said.has(plain)) return "";
+  said.add(plain);
+  return plain;
+}
 function childRunProxy(env = process.env) {
   const marked = String(env[MARK] ?? "");
   if (!marked) return { args: [], env: { ...env } };
@@ -47306,7 +47314,7 @@ async function proxyEntry(argv2, run5, { err = (text3) => process.stderr.write(t
   }
   return reexec(options.args, options.mode, options.proxy);
 }
-var TOR_HTTP_TUNNEL, TOR_CHECK, PROOF_TIMEOUT_MS, LOCAL_PROOF_TIMEOUT_MS, LOCAL_PROOF_MAX_BYTES, torProvenAt, proxyProvenAt, MARK, TOR_RUN_STARTED_ENV, ownProxyRefused, ONION_V3, RETRY_AFTER_CAP_MS, RETRY_AFTER_FLOOR_MS, RETRY_AFTER_DEFAULT_MS, RPC_NO_ANSWER_LIMIT_MS, RPC_PACING_CAP_MS, PACING_NOTICE_EVERY_MS, PACING_RATE_WINDOW_MS, TOR_MAX_ROTATIONS, runStartedAt, rpcNotBefore, pacingWaiters, pacingSince, pacedMs, rpcAnswered, lastAnswerAt, readSteps, pacingNoticeAt, pacingSamples, torMoves, torCircuitId, torMovesRefused, pendingMove, inTorRun, runNetworkMode, isOnionOrigin, ProxyUsageError, isOnionHost, TOR_EXPERT_BUNDLE, TUNNEL_LINE, TOR_INSTALL, OS_NAMES, osKey, torNotRunningMessage, NOTICE, QUIET_RUN_MARK, QUIET_NOTICE, quietRun, TOR_TROUBLE_LINE, quietTorErr, withRunTag, proxyEnv, pacedSoFar, RESENDABLE_METHOD, torCircuit, GLOBAL_DISPATCHER2, laneDispatchers, paymentWarmStop, PROXY_WARNING_FLAG, proxiedExecArgv, proxiedNodeOptions, TOR_FROM_CONFIG_ENV, TOR_FROM_CONFIG_HINT;
+var TOR_HTTP_TUNNEL, TOR_CHECK, PROOF_TIMEOUT_MS, LOCAL_PROOF_TIMEOUT_MS, LOCAL_PROOF_MAX_BYTES, torProvenAt, proxyProvenAt, MARK, TOR_RUN_STARTED_ENV, ownProxyRefused, ONION_V3, RETRY_AFTER_CAP_MS, RETRY_AFTER_FLOOR_MS, RETRY_AFTER_DEFAULT_MS, RPC_NO_ANSWER_LIMIT_MS, RPC_PACING_CAP_MS, PACING_NOTICE_EVERY_MS, PACING_RATE_WINDOW_MS, TOR_MAX_ROTATIONS, runStartedAt, rpcNotBefore, pacingWaiters, pacingSince, pacedMs, rpcAnswered, lastAnswerAt, readSteps, pacingNoticeAt, pacingSamples, torMoves, torCircuitId, torMovesRefused, pendingMove, inTorRun, runNetworkMode, isOnionOrigin, ProxyUsageError, isOnionHost, TOR_EXPERT_BUNDLE, TUNNEL_LINE, TOR_INSTALL, OS_NAMES, osKey, torNotRunningMessage, NOTICE, QUIET_RUN_MARK, QUIET_NOTICE, QUIET_TERMINAL_COMMANDS, INFER_SUBCOMMANDS, quietRun, TOR_TROUBLE_LINE, TOR_WAIT_PLAIN, TOR_TROUBLE_PLAIN, TOR_TROUBLE_SAID, quietTorErr, withRunTag, proxyEnv, pacedSoFar, RESENDABLE_METHOD, torCircuit, GLOBAL_DISPATCHER2, laneDispatchers, paymentWarmStop, PROXY_WARNING_FLAG, proxiedExecArgv, proxiedNodeOptions, TOR_FROM_CONFIG_ENV, TOR_FROM_CONFIG_HINT;
 var init_proxy = __esm({
   "wallet/src/net/proxy.mjs"() {
     "use strict";
@@ -47371,14 +47379,31 @@ var init_proxy = __esm({
       chat: { tor: "Private: this chat goes through Tor.", proxy: "Private: this chat goes through your proxy." },
       funds: { tor: "Private: every request of this run goes through Tor.", proxy: "Private: every request of this run goes through your proxy." }
     };
+    QUIET_TERMINAL_COMMANDS = /* @__PURE__ */ new Set(["add-funds", "funds-status", "balance", "unshield"]);
+    INFER_SUBCOMMANDS = /* @__PURE__ */ new Set(["models", "serve", "start", "status", "stop"]);
     quietRun = (args) => {
       if (args.includes("--verbose")) return void 0;
       if (args[0] === "chat") return "chat";
-      return ["add-funds", "funds-status"].includes(args[0]) && process.stdout.isTTY && !args.includes("--json") ? "funds" : void 0;
+      const quietCommand = QUIET_TERMINAL_COMMANDS.has(args[0]) || args[0] === "infer" && !INFER_SUBCOMMANDS.has(args[1]);
+      return quietCommand && process.stdout.isTTY && !args.includes("--json") ? "funds" : void 0;
     };
     TOR_TROUBLE_LINE = /\bno (?:other )?(?:history-proxy )?onion\b|\bgave no answer\b|\bstalled\b|\bHTTP 429\b|\bcannot move\b/;
+    TOR_WAIT_PLAIN = "Tor is slow right now, so the wallet waits for it and tries again. This can take longer than usual.";
+    TOR_TROUBLE_PLAIN = [
+      [/\bpublishes no onion\b/, "One server of this run has no Tor-only address, so the last Tor relay sees that server's name, but not what the wallet sends."],
+      [/\bHTTP 429\b/, "A server asked the wallet to slow down, so the wallet waits as the server asks. This can add some time."],
+      [/\bkeeps its circuit\b|\bcannot move\b|\bretries there\b|\bwait for (?:it|them)\b|\bno (?:other )?(?:history-proxy )?onion\b/, TOR_WAIT_PLAIN],
+      [/\bmoved to a new Tor circuit\b|\bgave no answer\b/, "Tor was slow, so the wallet switched to another Tor route. This can add a few seconds."]
+    ];
+    TOR_TROUBLE_SAID = /* @__PURE__ */ new Set();
     quietTorErr = (err) => (text3) => {
-      if (/^tor: /.test(text3) && !TOR_TROUBLE_LINE.test(text3) && !/\bWARNING\b/.test(text3)) return;
+      const plain = plainTorTrouble(text3);
+      if (plain !== void 0) {
+        if (plain) err(`${plain}
+`);
+        return;
+      }
+      if (/^tor: /.test(text3) && !/\bWARNING\b/.test(text3)) return;
       err(text3);
     };
     withRunTag = (mode, proxy) => {
@@ -103417,7 +103442,9 @@ async function createSellerAdapter({
     }
     syncDirectory2();
   }
-  console.log(`SELLER_STORE layout=${OFFERS_LAYOUT} offers=${Object.keys(state.offers).length} migrated=${migrated ? "yes" : "no"} ms=${Date.now() - storeStarted}`);
+  if (receiptVerification === "chain") {
+    console.log(`SELLER_STORE layout=${OFFERS_LAYOUT} offers=${Object.keys(state.offers).length} migrated=${migrated ? "yes" : "no"} ms=${Date.now() - storeStarted}`);
+  }
   let dirty = false;
   let snapshotting = false;
   let generation = 0;
@@ -107367,6 +107394,18 @@ var init_family = __esm({
   }
 });
 
+// wallet/src/caps/launchCaps.mjs
+function capFlagFromLaunchLine(flag3, argv2 = process.argv) {
+  const at = argv2.indexOf("mcp");
+  if (at < 0) return false;
+  return argv2.slice(at + 1).some((arg) => arg === flag3 || arg.startsWith(`${flag3}=`));
+}
+var init_launchCaps = __esm({
+  "wallet/src/caps/launchCaps.mjs"() {
+    "use strict";
+  }
+});
+
 // wallet/src/mcp/sendRunner.mjs
 import { spawn as spawn4 } from "node:child_process";
 import { dirname as dirname22, join as join24 } from "node:path";
@@ -109872,9 +109911,9 @@ function refusalSay(a, tool, again, npmVersion) {
     const minutes = minutesText(REFUND_MINUTES);
     const ask = typeof a.requestId === "string" && a.requestId ? `Ask again with request_id ${a.requestId}.` : "Ask again with the same request_id.";
     return [
-      `${head} ${again} If the seller never takes it, the money returns in about ${minutes}.`,
-      `${head} ${ask} If the seller never takes it, the money returns in about ${minutes}.`,
-      `${head} ${ask} Otherwise the money returns in about ${minutes}.`
+      `${head} ${again} If the seller never takes it, the money returns within about ${minutes}.`,
+      `${head} ${ask} If the seller never takes it, the money returns within about ${minutes}.`,
+      `${head} ${ask} Otherwise the money returns within about ${minutes}.`
     ].find((line) => words(line) <= SAY_MAX_WORDS) ?? `${head} ${again}`;
   }
   if (/_retry_same_request$/.test(code2)) {
@@ -109973,7 +110012,7 @@ function refusalSay(a, tool, again, npmVersion) {
     const total = usdcText(a.totalAtomic ?? a.neededAtomic ?? a.amountAtomic);
     const cap = usdcText(a.capAtomic ?? a.limitAtomic);
     if (a.capKind === "call" && total && cap) return `Nothing was paid: it costs ${total} USDC, over this request's ${cap} USDC cap. Allow ${total} USDC to pay it.`;
-    return total && cap ? `Nothing was paid: ${total} USDC is over your ${cap} USDC limit. ${raiseLine("--max-payment", npmVersion)}` : `Nothing was paid: this is above your per-payment limit. ${raiseLine("--max-payment", npmVersion)}`;
+    return total && cap ? raiseLine("--max-payment", npmVersion, `Nothing was paid: ${total} USDC is over your ${cap} USDC limit.`) : raiseLine("--max-payment", npmVersion, "Nothing was paid: this is above your per-payment limit.");
   }
   if (MOVE_CAP_CODES.has(code2)) {
     const total = usdcText(a.totalAtomic ?? a.neededAtomic ?? a.amountAtomic);
@@ -109991,10 +110030,10 @@ function refusalSay(a, tool, again, npmVersion) {
     return `Nothing was paid: this request's ${usdcText(a.capAtomic)} USDC cap is below the ${usdcText(a.ceilingAtomic)} USDC ceiling. ${allow}`;
   }
   if ((code2 === "inference_ceiling_over_cap" || code2 === "p03_float_over_maximum") && usdcText(a.totalAtomic) && usdcText(a.capAtomic)) {
-    return `Nothing was paid: up to ${usdcText(a.totalAtomic)} USDC is over your ${usdcText(a.capAtomic)} USDC limit. ${raiseLine("--max-payment", npmVersion)}`;
+    return raiseLine("--max-payment", npmVersion, `Nothing was paid: up to ${usdcText(a.totalAtomic)} USDC is over your ${usdcText(a.capAtomic)} USDC limit.`);
   }
   if (code2 === "mcp_session_cap_exceeded" && usdcText(a.capAtomic)) {
-    return `Nothing was paid: over your 24-hour limit of ${usdcText(a.capAtomic)} USDC. ${raiseLine("--max-session", npmVersion)}`;
+    return raiseLine("--max-session", npmVersion, `Nothing was paid: over your 24-hour limit of ${usdcText(a.capAtomic)} USDC.`);
   }
   if (OWNER_LIMIT_CODES.has(code2)) return "Nothing was paid. This is above a spending limit set for this wallet.";
   if (code2 === "spend_host_not_allowed") return "Nothing was paid. This wallet's settings do not allow payments to this site.";
@@ -110260,9 +110299,12 @@ function previewReason(a, npmVersion) {
   if (PAY_CAP_CODES.has(code2)) {
     const total = usdcText(a.totalAtomic ?? a.priceAtomic);
     const cap = usdcText(a.capAtomic);
-    return total && cap ? `${total} USDC is over your ${cap} USDC limit. ${raiseLine("--max-payment", npmVersion)}` : `it is above your per-payment limit. ${raiseLine("--max-payment", npmVersion)}`;
+    const room = SAY_MAX_WORDS - 3;
+    return total && cap ? raiseLine("--max-payment", npmVersion, `${total} USDC is over your ${cap} USDC limit.`, room) : raiseLine("--max-payment", npmVersion, "it is above your per-payment limit.", room);
+  }
+  if (code2 === "mcp_session_cap_exceeded" && usdcText(a.capAtomic)) {
+    return raiseLine("--max-session", npmVersion, `over your 24-hour limit of ${usdcText(a.capAtomic)} USDC.`, SAY_MAX_WORDS - 3);
   }
-  if (code2 === "mcp_session_cap_exceeded" && usdcText(a.capAtomic)) return `over your 24-hour limit of ${usdcText(a.capAtomic)} USDC. ${raiseLine("--max-session", npmVersion)}`;
   if (OWNER_LIMIT_CODES.has(code2)) return "it is above a spending limit set for this wallet.";
   if (BUSY.test(code2)) return "the payment service is busy; try again in a minute.";
   if (code2 === "mcp_wallet_unreadable" || code2 === "p03_float_config_unreadable") return "the price could not be checked just now; try again in a minute.";
@@ -110505,6 +110547,7 @@ var init_say = __esm({
     "use strict";
     init_amounts();
     init_config2();
+    init_launchCaps();
     SAY_MAX_WORDS = 25;
     DECIMALS = 6;
     ATOMIC3 = /^[0-9]{1,31}$/;
@@ -110519,7 +110562,13 @@ var init_say = __esm({
     MOVING_ROLES = /* @__PURE__ */ new Set(["draining", "old pool (switching)"]);
     CLOSE_LATER = "Cannot close yet: the seller could still take this payment. Ask again in about 2 minutes; if unpaid, it closes and the money comes back.";
     PAY_CAP_CODES = /* @__PURE__ */ new Set(["spend_payment_cap_exceeded", "mcp_cap_argument_above_launch_cap"]);
-    raiseLine = (flag3, npmVersion) => `Raise it: ${oneTimeCommandLine(`setup --yes ${flag3} <usdc>`, npmVersion)}, then restart this app.`;
+    raiseLine = (flag3, npmVersion, head, room = SAY_MAX_WORDS) => {
+      const lines = capFlagFromLaunchLine(flag3) ? [`Raise ${flag3} in this app's shinjuku-shielded entry, then restart this app.`] : [
+        `Raise it: ${oneTimeCommandLine(`setup --yes ${flag3} <usdc>`, npmVersion)}, then restart this app.`,
+        `Raise ${flag3} with setup in a terminal, then restart this app.`
+      ];
+      return lines.map((line) => `${head} ${line}`).find((line) => words(line) <= room) ?? `${head} ${lines.at(-1)}`;
+    };
     MOVE_CAP_CODES = /* @__PURE__ */ new Set(["mcp_shield_cap_exceeded", "mcp_unshield_cap_exceeded"]);
     OWNER_LIMIT_CODES = /* @__PURE__ */ new Set([
       "mcp_session_cap_exceeded",
@@ -123332,7 +123381,7 @@ ${canonical5}`;
       } catch {
       }
       const sessionLeft = sessionLeftShown(policy, countStore);
-      const sessionSummary = `Spending limits: ${capWords(policy.limits.maxPaymentAtomic)} per payment and ${capWords(policy.limits.maxSessionAtomic)} in any 24 hours, for this wallet (every MCP process counts; a pool upgrade starts a new 24-hour count)${sessionLeft === null ? "" : ` (${usdcText2(sessionLeft)} USDC left now)`}; ${usdcText2(policy.sessionSpentAtomic) ?? "0"} USDC paid in the last 24 hours. They come from this MCP server's launch line in the host (--max-payment and --max-session, in USDC like 0.05), else from the limits setup recorded. To change them, edit those flags in the host's MCP entry, or run ${terminalCommand("setup --yes --max-payment <usdc> --max-session <usdc>")} in a terminal; then restart the host. The wallet file also holds its own limits (--max-payment, and --max-cumulative for all payments together): ${terminalCommand("limits")} shows and changes them`;
+      const sessionSummary = `Spending limits: ${capWords(policy.limits.maxPaymentAtomic)} per payment and ${capWords(policy.limits.maxSessionAtomic)} in any 24 hours, for this wallet (every MCP process counts; a pool upgrade starts a new 24-hour count)${sessionLeft === null ? "" : ` (${usdcText2(sessionLeft)} USDC left now)`}; ${usdcText2(policy.sessionSpentAtomic) ?? "0"} USDC paid in the last 24 hours. --max-payment comes from ${capPlaceWords("--max-payment")}, and --max-session from ${capPlaceWords("--max-session")}. To change one from the host's entry, edit that flag (in USDC, like 0.05) in the host's entry for shinjuku-shielded; to change one from setup, run ${terminalCommand("setup --yes --max-payment <usdc> --max-session <usdc>")} in a terminal; then restart the host. The wallet file also holds its own limits (--max-payment, and --max-cumulative for all payments together): ${terminalCommand("limits")} shows and changes them`;
       return json3({
         ok: true,
         ...reportPublic,
@@ -128920,7 +128969,7 @@ function createSetupTools({
   };
   return { tools: [setupTool, statusTool, ...MCP_TOOL_NAMES.map((name) => name === "x402_discover" ? discoverTool(discoverCacheDir) : notSetUp(name))], doneTool };
 }
-var import_web3133, shownCaps, RELEASE_RETRY_MS, STAGE_WORDS, stageWords, INTERNAL_BALANCE_DETAIL, shownBreakdown, sessionLeftShown, TOKEN_UNIT_TOOLS, RESOURCE_PAYMENT_WAL_PREFIX2, POOL_LAYOUT_CODE, POOL_LAYOUT_UPDATE, USEPOD_VIA_INFERENCE_CHAT, SEND_RUNS_ON, DEPOSIT_RUNS_ON, CLI_FUNDS_PLAN_PREFIX, CLI_FUNDS_SCHEMA, SELF_PAY_ORIGIN3, REQUEST_ID4, POSITIVE_ATOMIC6, PRIVATE_HOST3, FORBIDDEN_HEADERS3, MAX_BODY_BYTES2, PREVIEW_TIMEOUT_MS, PREVIEW_SELLER_READ_MS, CALL_BUDGET_MS, budgetLeft, MONEY_FIRST_ANSWER_MS, BALANCE_AFTER_LANDING_MS, JOIN_CALL_MAX_MS, JOIN_NUDGE_QUIET_MS, JOIN_STEP_MS, sleep2, PROGRESS_EVERY_MS2, READ_BUDGET_MS, UNPAID_TOR_TRY_MS, UNPAID_CLEAR_MS, READ_BUDGET_TOOLS, FLOAT_BUSY_CODES, RETRY_MARGIN_MS, ASK_PAY_CODES, runningNpmVersion, terminalCommand, capRaiseText, cheaperSellerText, limitNext, SAFE_TEXT, MCP_TOOL_ALIASES, POOL_SWITCH_WHY, POOL_SWITCH_NEXT, SWITCH_STATES, quietSwitch, switchKey, ATOMIC_TEXT, FLOAT_ID, ANSWERED_EXIT_RETRY_MS, ANSWERED_EXIT_UNCONFIRMED_MS, ANSWERED_EXIT_RETRY_WINDOW_MS, ANSWERED_EXIT_CLOSED, switchAmount, switchEta, switchRows, OWNER_CAP_CODES, JOIN_END_MCP, JOIN_END_TERMINAL_LIBRARY, JOIN_RETRY_BACKOFF_MS, WALLET_CAP_FIX, MCP_CAP_FIX, capFix, ownerOnlyNext, mcpNext, CONFIDENTIAL_RETIRED, json3, answerResult, discoverTool, refuse12, publicOffer, FLOAT_PAID_CODES, FLOAT_PRIVATE_LEG, floatStillSettling, MONEY_ID2, toRecordId, linkKindOf, moneyId, REFUSED_CODES, refusedCodeOf, PLAIN_REASONS, plainReason, KEPT_SEND_TRIES, shownId, isSplitSend, sendPartId, PROMISED_NEXT, PUBLIC_READ_TIMEOUT_MS, withTimeout, ownKey, readFailure, OWN_KEY_TOKENS_MAX, OWN_TOKENS_GRACE_MS, tokenAmountText, elsewhereId, AGENT_ID_SCHEMA, agentIdName, minutesText2, ageWords2, DEPOSIT_SENT_STATES, depositLanded, usdcText2, walkWalletHistory, REFRESH_LEASE_WALK_MS, HOME_MARKS_SETTLED_MS2, AUTO_BACKUPS_KEPT, AUTO_BACKUP_NAME, AUTO_BACKUP_VERIFIED, FRONTED_SETTLE_MARGIN_SLOTS, BALANCE_REFRESH_WAIT_MS, BALANCE_REFRESH_GRACE_MS, BALANCE_REFRESH_LONG_MS, INBOUND_REFRESH_AGE_MS, CAP_BALANCE_WAIT_MS, CAP_BALANCE_RETRY_MS, REFRESH_RETRY_MS, FINALITY_POLL_MS, FINALITY_WAIT_MS, FINALITY_REFRESH_LIMIT_MS, POOL_WATCH_MS, POOL_WATCH_POLL_MS, EARLY_BALANCE_DELAY_MS, FINALITY_SETTLE_WINDOW_SLOTS, PUBLIC_READ_ANSWER_MS, SWITCH_WAIT_MS, UNSHIELD_TO_NO_USDC_DETAIL, UNSHIELD_TO_INVALID_NEXT, INFERENCE_MIN_MAX_TOKENS, ELICIT_TIMEOUT_MS, ELICIT_UNSHOWN_MS, elicitUnshown, POLL_SECONDS3, TRANSFER_CHANGE_READ_MS, TEMP_CLEAN_DELAY_MS, KEPT_ON_DISK, MAX_SHIELDED_BALANCE_ATOMIC, receiveGenerator, MCP_TOOL_NAMES, MCP_HIDDEN_TOOL_NAMES, setupTerminalNext, SETUP_POLL_NEXT, PRIVATE_INFERENCE_WHY, PRIVATE_INFERENCE_NEXT;
+var import_web3133, shownCaps, RELEASE_RETRY_MS, STAGE_WORDS, stageWords, INTERNAL_BALANCE_DETAIL, shownBreakdown, sessionLeftShown, TOKEN_UNIT_TOOLS, RESOURCE_PAYMENT_WAL_PREFIX2, POOL_LAYOUT_CODE, POOL_LAYOUT_UPDATE, USEPOD_VIA_INFERENCE_CHAT, SEND_RUNS_ON, DEPOSIT_RUNS_ON, CLI_FUNDS_PLAN_PREFIX, CLI_FUNDS_SCHEMA, SELF_PAY_ORIGIN3, REQUEST_ID4, POSITIVE_ATOMIC6, PRIVATE_HOST3, FORBIDDEN_HEADERS3, MAX_BODY_BYTES2, PREVIEW_TIMEOUT_MS, PREVIEW_SELLER_READ_MS, CALL_BUDGET_MS, budgetLeft, MONEY_FIRST_ANSWER_MS, BALANCE_AFTER_LANDING_MS, JOIN_CALL_MAX_MS, JOIN_NUDGE_QUIET_MS, JOIN_STEP_MS, sleep2, PROGRESS_EVERY_MS2, READ_BUDGET_MS, UNPAID_TOR_TRY_MS, UNPAID_CLEAR_MS, READ_BUDGET_TOOLS, FLOAT_BUSY_CODES, RETRY_MARGIN_MS, ASK_PAY_CODES, runningNpmVersion, terminalCommand, capPlaceWords, capRaiseText, cheaperSellerText, limitNext, SAFE_TEXT, MCP_TOOL_ALIASES, POOL_SWITCH_WHY, POOL_SWITCH_NEXT, SWITCH_STATES, quietSwitch, switchKey, ATOMIC_TEXT, FLOAT_ID, ANSWERED_EXIT_RETRY_MS, ANSWERED_EXIT_UNCONFIRMED_MS, ANSWERED_EXIT_RETRY_WINDOW_MS, ANSWERED_EXIT_CLOSED, switchAmount, switchEta, switchRows, OWNER_CAP_CODES, JOIN_END_MCP, JOIN_END_TERMINAL_LIBRARY, JOIN_RETRY_BACKOFF_MS, WALLET_CAP_FIX, MCP_CAP_FIX, capFix, ownerOnlyNext, mcpNext, CONFIDENTIAL_RETIRED, json3, answerResult, discoverTool, refuse12, publicOffer, FLOAT_PAID_CODES, FLOAT_PRIVATE_LEG, floatStillSettling, MONEY_ID2, toRecordId, linkKindOf, moneyId, REFUSED_CODES, refusedCodeOf, PLAIN_REASONS, plainReason, KEPT_SEND_TRIES, shownId, isSplitSend, sendPartId, PROMISED_NEXT, PUBLIC_READ_TIMEOUT_MS, withTimeout, ownKey, readFailure, OWN_KEY_TOKENS_MAX, OWN_TOKENS_GRACE_MS, tokenAmountText, elsewhereId, AGENT_ID_SCHEMA, agentIdName, minutesText2, ageWords2, DEPOSIT_SENT_STATES, depositLanded, usdcText2, walkWalletHistory, REFRESH_LEASE_WALK_MS, HOME_MARKS_SETTLED_MS2, AUTO_BACKUPS_KEPT, AUTO_BACKUP_NAME, AUTO_BACKUP_VERIFIED, FRONTED_SETTLE_MARGIN_SLOTS, BALANCE_REFRESH_WAIT_MS, BALANCE_REFRESH_GRACE_MS, BALANCE_REFRESH_LONG_MS, INBOUND_REFRESH_AGE_MS, CAP_BALANCE_WAIT_MS, CAP_BALANCE_RETRY_MS, REFRESH_RETRY_MS, FINALITY_POLL_MS, FINALITY_WAIT_MS, FINALITY_REFRESH_LIMIT_MS, POOL_WATCH_MS, POOL_WATCH_POLL_MS, EARLY_BALANCE_DELAY_MS, FINALITY_SETTLE_WINDOW_SLOTS, PUBLIC_READ_ANSWER_MS, SWITCH_WAIT_MS, UNSHIELD_TO_NO_USDC_DETAIL, UNSHIELD_TO_INVALID_NEXT, INFERENCE_MIN_MAX_TOKENS, ELICIT_TIMEOUT_MS, ELICIT_UNSHOWN_MS, elicitUnshown, POLL_SECONDS3, TRANSFER_CHANGE_READ_MS, TEMP_CLEAN_DELAY_MS, KEPT_ON_DISK, MAX_SHIELDED_BALANCE_ATOMIC, receiveGenerator, MCP_TOOL_NAMES, MCP_HIDDEN_TOOL_NAMES, setupTerminalNext, SETUP_POLL_NEXT, PRIVATE_INFERENCE_WHY, PRIVATE_INFERENCE_NEXT;
 var init_tools = __esm({
   "wallet/src/mcp/tools.mjs"() {
     "use strict";
@@ -128948,6 +128997,7 @@ var init_tools = __esm({
     init_book();
     init_errorLine();
     init_spendPolicy();
+    init_launchCaps();
     import_web3133 = __toESM(require_index_cjs(), 1);
     init_esm2();
     init_deposit();
@@ -129051,9 +129101,14 @@ var init_tools = __esm({
     RETRY_MARGIN_MS = 15e3;
     ASK_PAY_CODES = /* @__PURE__ */ new Set(["spend_payment_cap_exceeded", "mcp_cap_argument_above_launch_cap"]);
     terminalCommand = (words2) => oneTimeCommandLine(words2, runningNpmVersion);
+    capPlaceWords = (flag3) => capFlagFromLaunchLine(flag3) ? `the host's entry (${flag3} in its args)` : "setup (config.json in the wallet folder)";
     capRaiseText = (flag3) => {
+      if (capFlagFromLaunchLine(flag3)) {
+        const both2 = flag3 === "--max-payment" ? " (raise --max-session there too when it is below the new amount: the server refuses to start with it lower)" : "";
+        return `This limit comes from the host's entry for shinjuku-shielded: its args hold ${flag3}. To raise it, the user changes that value there${both2}, with amounts in USDC like 0.5, then restarts the agent host (Claude Desktop: claude_desktop_config.json; Cursor: ~/.cursor/mcp.json; Claude Code: claude mcp get shinjuku-shielded shows the entry, then claude mcp remove shinjuku-shielded and claude mcp add it again with the new value; Hermes: config.yaml). Running setup does not change this limit: the entry's ${flag3} wins over the limit setup records.`;
+      }
       const both = flag3 === "--max-payment" ? " (add --max-session <usdc> too when the 24-hour limit is below the new amount: setup refuses it lower)" : "";
-      return `To raise it, the user runs this in a terminal: ${terminalCommand(`setup --yes ${flag3} <usdc>`)}${both}, with amounts in USDC like 0.5, then restarts the agent host. setup keeps the wallet and saves the limit in config.json in the wallet folder (~/.carbon-shielded-wallet, or SHIELDED_WALLET_HOME when it is set). If the host's entry for shinjuku-shielded has ${flag3} in its args, that value wins: change it there instead (Claude Desktop: claude_desktop_config.json; Cursor: ~/.cursor/mcp.json; Claude Code: claude mcp get shinjuku-shielded shows the entry; Hermes: config.yaml).`;
+      return `This limit comes from setup (the host's entry has no ${flag3}). To raise it, the user runs this in a terminal: ${terminalCommand(`setup --yes ${flag3} <usdc>`)}${both}, with amounts in USDC like 0.5, then restarts the agent host. setup keeps the wallet and saves the limit in config.json in the wallet folder (~/.carbon-shielded-wallet, or SHIELDED_WALLET_HOME when it is set).`;
     };
     cheaperSellerText = "Or call x402_discover to look for a cheaper seller of the same data.";
     limitNext = ({ totalAtomic, capAtomic } = {}, { flag: flag3 = "--max-payment", verb = "paid", noun = "costs" } = {}) => `${totalAtomic && capAtomic ? `Nothing was ${verb}. Tell the user: this ${noun} ${usdcText2(totalAtomic)} USDC and the limit (${flag3}) is ${usdcText2(capAtomic)} USDC.` : `Nothing was ${verb}. Tell the user this is above the limit (${flag3}).`} ${capRaiseText(flag3)}${verb === "paid" ? ` ${cheaperSellerText}` : ""}`;
@@ -130531,9 +130586,16 @@ function readConfig(env) {
 }
 function hideProgressLines(stream = process.stderr) {
   const original = stream.write;
+  const shown = (line) => {
+    if (!line.endsWith("\n")) return line;
+    const plain = plainTorTrouble(line);
+    if (plain !== void 0) return plain ? `${plain}
+` : "";
+    return isProgressLine(line) ? "" : line;
+  };
   stream.write = function write(chunk, encoding, callback) {
     const text3 = typeof chunk === "string" ? chunk : Buffer.from(chunk).toString(typeof encoding === "string" ? encoding : "utf8");
-    const kept = text3.split(/(?<=\n)/).filter((line) => !(line.endsWith("\n") && isProgressLine(line))).join("");
+    const kept = text3.split(/(?<=\n)/).map(shown).join("");
     if (kept === text3) return original.call(stream, chunk, encoding, callback);
     const done = typeof encoding === "function" ? encoding : callback;
     if (kept) return original.call(stream, kept, done);
@@ -130820,7 +130882,7 @@ var init_chat = __esm({
     NO_ANSWER_CODES = /^inference_(upstream_failed|response_invalid)$/;
     NOTHING_PAID = /\bnothing was (?:sent or )?paid\b|\bnothing was paid or signed\b/i;
     CAP_FROM = { line: "from this command line", setup: "set in setup", default: "the default" };
-    PROGRESS_LINE = /^(?:tor|rpc|history|memo service): |^reading \d+ memos? from the memo service/;
+    PROGRESS_LINE = /^(?:tor|rpc|history|memo service): |^reading \d+ memos? from the memo service|^reading your private balance again\b|^merge \S+: self-paying\b/;
     SHOWN_PROGRESS = /\bWARNING\b|\bminutes?\b/;
     isProgressLine = (line) => PROGRESS_LINE.test(line) && !SHOWN_PROGRESS.test(line) && !TOR_TROUBLE_LINE.test(line);
     fail46 = (deps, message) => typeof deps.publicFailure === "function" ? deps.publicFailure(message) : new Error(message);
@@ -157384,6 +157446,7 @@ function withProofToolsRefresh(options, fromConfig) {
   return { ...options, proofToolsRefresh: { home: fromConfig.home } };
 }
 var inProxiedRun = (env) => childRunProxy(env).args.length > 0;
+var terminalQuiet = (values, deps) => deps.stdoutIsTTY?.() === true && !values.has("--json") && !values.has("--verbose");
 var TOR_RUN_STARTED_ENV2 = "SHINJUKU_WALLET_TOR_RUN_STARTED_FILE";
 var TOR_DOWN_DETAIL = "Your private connection (Tor) is not running, so no payment was made. Start Tor, then restart this MCP server in your agent host and try again.";
 var recordedTunnelHost = (configPath2) => {
@@ -158468,7 +158531,8 @@ var COMMANDS = [
       bool2("--refresh", "run the same chain walk as recover first (network)"),
       // --digests narrows recover's printed output; a balance needs the whole history.
       ...recoverFlags({ refreshOnly: true }).filter((entry) => entry.name !== "--digests"),
-      bool2("--json", "print the whole report as JSON in a terminal too (a file or a program gets JSON without this flag)")
+      bool2("--json", "print the whole report as JSON in a terminal too (a file or a program gets JSON without this flag)"),
+      bool2("--verbose", "in a terminal, also show the wallet's own progress lines (Tor, the RPC relay, the pool history, the memo reads); without it a terminal shows only the result")
     ],
     examples: [
       `${CLI2} balance --pool ${GUIDE.pool}`,
@@ -158479,7 +158543,7 @@ var COMMANDS = [
       "shinjukuShielded is what you can spend: unspent accounts and notes minus the ones in-flight payments or unshields will use.",
       "Without --refresh, balance reads only local files: the last walk (recover or balance --refresh) and the wallet log. It makes no network call.",
       "shinjukuShielded is null when the last walk is missing, stale, or incomplete. reasons says why; next shows the command to run.",
-      "In a terminal it prints one plain line: the private balance in USDC, and a short reason when it is not current (then the command to run). A program, or --json, gets the whole report as JSON (total, shinjukuShielded, status, reasons, next, detail).",
+      "In a terminal it prints one plain line: the private balance in USDC, and a short reason when it is not current (then the command to run). The wallet's own progress lines (Tor, the RPC relay, the pool history walk, the memo reads) show only with --verbose; warnings and failures always show. A program, or --json, gets the whole report as JSON (total, shinjukuShielded, status, reasons, next, detail).",
       "Payments that others send to this wallet appear only after a refresh.",
       "With --refresh it also reads the one-time deposit addresses of this home's earlier pools (one address per request). USDC found there goes into this pool by itself (the facilitator pays the fee), and earlierDeposits lists each one with a notice.",
       "paymentsWithoutWaiting (and detail.fundedAccounts): your funded accounts that no in-flight work holds. A payment spends one account, and its change pays only after the next pool anchor (up to 5 minutes; about 30 s on some pools), so this many payments can run before the next anchor without waiting (an account made since the last anchor, such as a change, waits for the next one). add-funds --split makes more of them."
@@ -158493,10 +158557,12 @@ var COMMANDS = [
         }
         return;
       }
-      const extra = [...values.keys()].find((name) => name !== "--pool" && name !== "--json");
+      const extra = [...values.keys()].find((name) => !["--pool", "--json", "--verbose"].includes(name));
       if (extra) throw new UsageError(`${extra} is used only with --refresh`);
     },
     rpcWhen: (values) => values.has("--refresh"),
+    // In a terminal its progress lines show only with --verbose (inference/chat.mjs hideProgressLines; fault 6 of the pin 0.3.86).
+    quietProgress: (values, deps) => terminalQuiet(values, deps),
     run: (args, values, deps, io) => runBalance(args, values, deps, io)
   },
   {
@@ -158586,6 +158652,7 @@ var COMMANDS = [
       flag2("--max-session", "<usdc>", "the most this run may pay in total, in USDC; at least --max-payment. Default: the cap setup recorded, else 1", { check: "atomic", usdc: true }),
       flag2("--request-id", "<id>", "your stable name for this request; default infer-<random>, printed on stderr before any payment. Rerun with the same id to resume a stopped run: it never pays twice"),
       bool2("--json", "print one JSON line (answer, model, usage, paidAtomic, requestId, receipt) instead of the answer text"),
+      bool2("--verbose", "in a terminal, also show the wallet's own progress lines (Tor, the RPC relay, the pool history, the memo reads); without it a terminal shows only the cost line, the answer, and what it paid"),
       // After setup config.json gives every wallet flag; they stay for a wallet in another place.
       ...payerSessionFlags().map((spec) => ({ ...spec, required: false }))
     ],
@@ -158599,7 +158666,7 @@ var COMMANDS = [
       `Private form (recommended): pipe the prompt in and write - in its place, so it is not in the process list or your shell history: ${INFER_STDIN_EXAMPLE}. stdin is read until it ends (UTF-8, at most 1 MiB); an empty one is refused before anything is paid.`,
       "It runs only through Tor (or --proxy <url>), never a direct connection: usePod would see your IP address next to your prompt, so the command refuses before anything is sent.",
       `${INFER_COST_LINE}. stderr says this before the payment, with the most the request can cost.`,
-      "stdout holds the answer; stderr says paid <amount> USDC request-id <id>. An answer cut short by --max-tokens says so.",
+      "stdout holds the answer; stderr says paid <amount> USDC request-id <id>. An answer cut short by --max-tokens says so. In a terminal the wallet's own progress lines (Tor, the RPC relay, the pool history walk, the memo reads) show only with --verbose; warnings and failures always show.",
       "Exit codes: 0 answered; 1 refused or failed (one line says why, and a hint says what works); 2 the command line is wrong."
     ],
     next: `chat in this terminal: ${CLI2} chat; the local AI address for an agent app: ${CLI2} infer start; the models and prices: ${CLI2} infer models`,
@@ -158609,6 +158676,8 @@ var COMMANDS = [
     // Outside a Tor run (or without a wallet) infer runs again behind Tor or refuses: it reads nothing itself (as chat).
     skipFamilyRoots: (values, env) => !inferPaysHere(values, env),
     rpcWhen: (values, env) => inferPaysHere(values, env),
+    // The Tor run, the one that pays, in a terminal: its progress lines show only with --verbose (as chat; fault 6 of the pin 0.3.86).
+    quietProgress: (values, deps) => inProxiedRun(deps.env) && terminalQuiet(values, deps),
     run: (args, values, deps, io) => deps.inferMain(values, { ...deps, io })
   },
   {
@@ -158943,7 +159012,8 @@ var COMMANDS = [
       HISTORY_RPC_FLAG,
       flag2("--parts", "<1-8>", "optional, default 1: send the amount as this many separate exits of unequal size (a private send); each part carries at least 0.01 USDC; above 1 it needs --max-delay-minutes 1-60, and --unshield-id may then be at most 45 characters", { check: "count" }),
       flag2("--max-delay-minutes", "<0-60>", "optional, default 0: each part, part 1 included, is sent after a random wait of up to this many minutes; a part that is late (the command was stopped) waits a new random time", { check: "count" }),
-      bool2("--json", "end with the result as JSON in a terminal too (a file or a program gets JSON without this flag)")
+      bool2("--json", "end with the result as JSON in a terminal too (a file or a program gets JSON without this flag)"),
+      bool2("--verbose", "in a terminal, also show the wallet's own progress lines (Tor, the RPC relay, the pool history, the memo reads, the join's steps); without it a terminal shows only the steps you act on and the result")
     ],
     // T9 (live run 2026-10-23 18:44 UTC, npm 0.3.83): the old two examples looked the same and neither had --amount or a
     // plain --to; after setup these two work as typed (config.json gives every file flag).
@@ -158954,12 +159024,14 @@ var COMMANDS = [
       "The recipient must already hold USDC (a Solana address with a USDC account, for example a Phantom address that received USDC); the command checks it first and sends nothing to an address without one. It refuses this wallet's own address: an exit there would show on chain that the money is yours. Best: an address that never sent USDC into this wallet.",
       "--amount all sends the whole private balance. When the balance is in more than one part, the same command joins the parts first (a private move inside this wallet, no fee; nothing leaves it; about 2 minutes per extra part, after a random wait of up to 60 s), then sends all of it. Ctrl+C stops it; the same command again goes on and never sends twice.",
       "The command prints the unshield id first. If it stops, run the same command with --unshield-id <that id> added: it finishes that unshield and never sends twice.",
-      "In a terminal it ends with one plain line (what was sent, to whom, the exit transaction) and the new private balance: after an exit the wallet reads the balance again itself (the same walk as balance --refresh, over the same connection; Tor when setup recorded it). A program, or --json, gets the result as JSON.",
+      "In a terminal it ends with one plain line (what was sent, to whom, the exit transaction) and the new private balance: after an exit the wallet reads the balance again itself (the same walk as balance --refresh, over the same connection; Tor when setup recorded it). A program, or --json, gets the result as JSON. The wallet's own progress lines (Tor, the RPC relay, the pool history walk, the memo reads, the join's steps) show only with --verbose; warnings and failures always show.",
       `--parts and --max-delay-minutes make a private send (${CLI2} unshield --amount 3 --parts 3 --max-delay-minutes 20 --to <your wallet address>): the plan (part sizes, part ids <unshield-id>-p1.., earliest times) is saved in the wallet before part 1, each part is one unshield, and a stopped run continues at the first part not yet exited when the same command with its --unshield-id runs again. The wallet is free for other commands while a part waits. Keep the command running until it prints its result.`,
       `Stop the parts of a private send not sent yet: ${CLI2} unshield-cancel --unshield-id <id>.`,
       "Privacy limit of a private send: every part goes to the same --to, so anyone who adds up that account's incoming transfers sees the total. The parts hide the time and the single amount of the exit, not the sum the account received."
     ],
     next: `back up the wallet (${CLI2} help backup-export); ${CLI2} balance shows the private balance`,
+    // In a terminal its progress lines show only with --verbose (inference/chat.mjs hideProgressLines; fault 6 of the pin 0.3.86).
+    quietProgress: (values, deps) => terminalQuiet(values, deps),
     run: (args, values, deps, io) => runUnshieldCommand(args, values, deps, io)
   },
   {
@@ -159749,7 +159821,7 @@ async function recipientHoldsUsdc({ connection, mint, owner }) {
 }
 async function runUnshieldCommand(args, values, deps, io) {
   const terminal = deps.stdoutIsTTY?.() === true && !values.has("--json");
-  let callArgs = args.filter((word) => word !== "--json");
+  let callArgs = args.filter((word) => word !== "--json" && word !== "--verbose");
   const setArg = (name, value) => {
     const at = callArgs.indexOf(name);
     callArgs = at >= 0 ? callArgs.map((word, index) => index === at + 1 ? value : word) : [...callArgs, name, value];
@@ -159807,6 +159879,7 @@ async function runUnshieldCommand(args, values, deps, io) {
   if (values.get("--amount") === "all") setArg("--amount", await sendAllAtomic(values, deps, io, openStore, ensureId));
   ensureId();
   const gated = await spendGate(callArgs, values, deps, io, { amountAtomic: values.get("--amount"), again: ` with --unshield-id ${id}` });
+  if (terminal && isSingleSend(values.get("--parts") ?? 1, values.get("--max-delay-minutes") ?? 0)) io.err("sending privately now; this takes about a minute\n");
   let answer;
   const returned = await deps.unshieldMain(gated, { output: (result) => {
     answer = result;
@@ -160534,7 +160607,7 @@ async function runBalance(args, values, deps, io) {
   let store;
   let earlierDeposits = [];
   if (values.has("--refresh")) {
-    const refreshed = await refreshSnapshot(args.filter((word) => word !== "--json"), values, deps);
+    const refreshed = await refreshSnapshot(args.filter((word) => word !== "--json" && word !== "--verbose"), values, deps);
     warnUnsavedSync(refreshed.result, io);
     refreshed.save();
     await refreshed.prune();