shinjuku-shield 0.3.90 → 0.3.91

package/README.md

@@ -6,13 +6,13 @@ answers privately, in a terminal chat or for your agent app. Its `mcp`
 command runs a local MCP server (stdio) for your agent. Your keys never
 leave your machine.
 
-This is version 0.3.90. The npm packages `shinjuku-shield` and
+This is version 0.3.91. The npm packages `shinjuku-shield` and
 `shinjuku-shielded` hold the same files; `shinjuku` is the short command.
 
 ## Set up
 
 ```sh
-npx -y --no-audit --no-fund shinjuku-shield@0.3.90 setup
+npx -y --no-audit --no-fund shinjuku-shield@0.3.91 setup
 ```
 
 Setup makes the wallet on this machine, a private passphrase file, and the
@@ -24,7 +24,7 @@ server to that host's config.
 ## The `shinjuku` command
 
 ```sh
-npm install -g shinjuku@0.3.90
+npm install -g shinjuku@0.3.91
 shinjuku help
 ```
 
@@ -36,13 +36,13 @@ Every wallet command works after `shinjuku`, for example `shinjuku balance`,
 Claude Code:
 
 ```sh
-claude mcp add --scope user shinjuku-shielded -- npx -y --no-audit --no-fund shinjuku-shield@0.3.90 mcp
+claude mcp add --scope user shinjuku-shielded -- npx -y --no-audit --no-fund shinjuku-shield@0.3.91 mcp
 ```
 
 Claude Desktop (`claude_desktop_config.json`) or Cursor (`~/.cursor/mcp.json`):
 
 ```json
-{ "mcpServers": { "shinjuku-shielded": { "command": "npx", "args": ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.90", "mcp"] } } }
+{ "mcpServers": { "shinjuku-shielded": { "command": "npx", "args": ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.91", "mcp"] } } }
 ```
 
 On native Windows, if the host cannot find `npx`, use `"command": "cmd"` and

package/manifest.json

@@ -1,9 +1,9 @@
 {
   "schema": "carbon-shielded-wallet/bundle-manifest/v1",
   "file": "shinjuku-wallet.mjs",
-  "sha256": "4cda1792a58d926b79cdd34975b53b9177940b1f3e266318695cb32d7f70b295",
-  "bytes": 12682087,
-  "sourceCommit": "eb43ca199e7be979f8bb406d387eec337a2ca50b",
+  "sha256": "1d7842469a3a56390eae2b339649cb42551a19ef63c2f9b1d5716f875ce11b52",
+  "bytes": 12694423,
+  "sourceCommit": "49f574ac0d496bfe5fda2fff09ed900810a54eed",
   "sourceDirty": false,
   "installRecordMatchesLockfile": true,
   "releaseRule": "valid only when two fresh npm ci --ignore-scripts builds on different OSes give the same sha256; installRecordMatchesLockfile true means every entry npm installed equals its package-lock.json entry and every entry not marked optional, devOptional included, is installed: an optional entry (a package for another platform) may be absent",
@@ -1297,5 +1297,5 @@
       "version": "1.8.0"
     }
   ],
-  "publishedAt": "2026-10-24T00:59:36.270Z"
+  "publishedAt": "2026-10-24T01:44:56.272Z"
 }

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "shinjuku-shield",
-  "version": "0.3.90",
+  "version": "0.3.91",
   "mcpName": "io.github.ShinjukuStaition/shinjuku-mcp",
   "description": "Shinjuku Shielded, the private x402 facilitator on Solana: the self-custody wallet CLI and its MCP server. Shield, pay, and unshield USDC from any MCP agent, under caps you set.",
-  "shinjukuRelease": "4cda1792",
-  "shinjukuSha256": "4cda1792a58d926b79cdd34975b53b9177940b1f3e266318695cb32d7f70b295",
+  "shinjukuRelease": "1d784246",
+  "shinjukuSha256": "1d7842469a3a56390eae2b339649cb42551a19ef63c2f9b1d5716f875ce11b52",
   "license": "SEE LICENSE IN LICENSE.txt",
   "author": "Shinjuku Shielded",
   "homepage": "https://github.com/ShinjukuStaition/shinjuku-mcp#readme",

package/shinjuku-wallet.mjs

@@ -30309,7 +30309,7 @@ Message: ${transactionMessage2}.
         await this._unsubscribeClientSubscription(clientSubscriptionId, "root change");
       }
     };
-    var Keypair16 = class _Keypair {
+    var Keypair17 = class _Keypair {
       /**
        * Create a new keypair instance.
        * Generate random keypair if no {@link Ed25519Keypair} is provided.
@@ -30853,7 +30853,7 @@ Message: ${transactionMessage2}.
         } = params;
         assert(privateKey.length === PRIVATE_KEY_BYTES$1, `Private key must be ${PRIVATE_KEY_BYTES$1} bytes but received ${privateKey.length} bytes`);
         try {
-          const keypair = Keypair16.fromSecretKey(privateKey);
+          const keypair = Keypair17.fromSecretKey(privateKey);
           const publicKey4 = keypair.publicKey.toBytes();
           const signature3 = sign3(message, keypair.secretKey);
           return this.createInstructionWithPublicKey({
@@ -32293,7 +32293,7 @@ Message: ${transactionMessage2}.
     exports.Enum = Enum;
     exports.EpochSchedule = EpochSchedule;
     exports.FeeCalculatorLayout = FeeCalculatorLayout;
-    exports.Keypair = Keypair16;
+    exports.Keypair = Keypair17;
     exports.LAMPORTS_PER_SOL = LAMPORTS_PER_SOL;
     exports.LOOKUP_TABLE_INSTRUCTION_LAYOUTS = LOOKUP_TABLE_INSTRUCTION_LAYOUTS;
     exports.Loader = Loader;
@@ -104690,6 +104690,9 @@ function checkConfig(value) {
   }
   if (BigInt(caps.maxSession) < BigInt(caps.maxPayment)) throw invalid3("caps.maxSession is below caps.maxPayment");
   if (value.tor !== void 0 && typeof value.tor !== "boolean") throw invalid3("tor is not true or false");
+  if (value.unshieldTo !== void 0 && (!Array.isArray(value.unshieldTo) || value.unshieldTo.length < 1 || value.unshieldTo.length > MAX_OWN_ADDRESSES || !value.unshieldTo.every(isPubkey))) {
+    throw invalid3(`unshieldTo is not a list of 1 to ${MAX_OWN_ADDRESSES} base58 Solana addresses`);
+  }
   if (value.torTunnel !== void 0) {
     let tunnel;
     try {
@@ -104714,9 +104717,17 @@ function checkConfig(value) {
   return Object.freeze({
     ...value,
     caps: Object.freeze({ ...caps }),
+    ...value.unshieldTo ? { unshieldTo: Object.freeze([...value.unshieldTo]) } : {},
     ...value.previousPools ? { previousPools: Object.freeze(value.previousPools.map((entry) => Object.freeze({ ...entry }))) } : {}
   });
 }
+function ownAddressesNow(home) {
+  try {
+    return [...readSetupConfig(home)?.unshieldTo ?? []];
+  } catch {
+    return [];
+  }
+}
 function readSetupConfig(home) {
   const path = configPath(home);
   if (!existsSync(path)) return null;
@@ -104760,7 +104771,8 @@ function mcpFlagsFromConfig(home, config) {
     ["--max-payment", config.caps.maxPayment],
     ["--max-session", config.caps.maxSession],
     ["--max-shield", config.caps.maxShield],
-    ["--max-unshield", config.caps.maxUnshield]
+    ["--max-unshield", config.caps.maxUnshield],
+    ["--unshield-to", config.unshieldTo ? [...config.unshieldTo] : void 0]
   ].filter(([, value]) => value !== void 0);
 }
 function npxPackageWord(npmVersion) {
@@ -104931,7 +104943,7 @@ function addToJsonHost(file, entry, { now = /* @__PURE__ */ new Date(), force =
   }
   return { file, changed: true, ...backup ? { backup } : {} };
 }
-var import_web3118, CONFIG_SCHEMA, CONFIG_FILE, NPM_PACKAGE_NAMES, NPX_PACKAGE, COMMAND_PACKAGE, NPX_INSTALL_FLAGS, MCP_SERVER_NAME, P03_BINDING2, PRODUCTION, RETIRED_POOLS, NO_LIMIT_ATOMIC2, DEFAULT_CAPS, OLD_DEFAULT_SETUP_CAPS, OLD_DEFAULT_WALLET_BUDGETS, capText, POSITIVE_ATOMIC2, configPath, homeWalletPath, invalid3, isPubkey, HOST_TARGETS, PINNED_PACKAGE, NPM_VERSION, knownNpmVersion, WINDOWS_SHELL_CODE, isPlainObject3, sameJson2;
+var import_web3118, CONFIG_SCHEMA, CONFIG_FILE, NPM_PACKAGE_NAMES, NPX_PACKAGE, COMMAND_PACKAGE, NPX_INSTALL_FLAGS, MCP_SERVER_NAME, P03_BINDING2, PRODUCTION, RETIRED_POOLS, NO_LIMIT_ATOMIC2, DEFAULT_CAPS, OLD_DEFAULT_SETUP_CAPS, OLD_DEFAULT_WALLET_BUDGETS, capText, POSITIVE_ATOMIC2, configPath, homeWalletPath, invalid3, isPubkey, MAX_OWN_ADDRESSES, isOwnAddressText, HOST_TARGETS, PINNED_PACKAGE, NPM_VERSION, knownNpmVersion, WINDOWS_SHELL_CODE, isPlainObject3, sameJson2;
 var init_config2 = __esm({
   "wallet/src/setup/config.mjs"() {
     "use strict";
@@ -104981,6 +104993,8 @@ var init_config2 = __esm({
         return false;
       }
     };
+    MAX_OWN_ADDRESSES = 8;
+    isOwnAddressText = (value) => isPubkey(value);
     HOST_TARGETS = Object.freeze(["claude-code", "claude-desktop", "cursor"]);
     PINNED_PACKAGE = /^shinjuku-shield(?:ed)?@(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$/;
     NPM_VERSION = /^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$/;
@@ -110043,9 +110057,12 @@ function refusalSay(a, tool, again, npmVersion) {
     return /\bover Tor\b/.test(detail) ? "Nothing was paid. The seller gave no answer over Tor; some block Tor exits. Try later, or ask the user whether to pay without --tor." : "Nothing was paid. The seller did not answer.";
   }
   const unshown = /without showing it|could not show the confirmation/.test(detail);
-  if (code2 === "mcp_unshield_declined") {
-    return unshown ? "Not sent. This app answered the send question before you could see it. Use an app that shows the question." : "Not sent. The send was not confirmed.";
+  if (code2 === "mcp_unshield_declined" && unshown || code2 === "mcp_unshield_to_not_allowed") {
+    const head = "Not sent: this app could not show you the address to confirm.";
+    const own = `${head} If it is your wallet, run the setup command below in a terminal.`;
+    return str(a.ownAddressCommand) && words(own) <= SAY_MAX_WORDS ? own : head;
   }
+  if (code2 === "mcp_unshield_declined") return "Not sent. The send was not confirmed.";
   if (code2 === "mcp_setup_declined" && unshown) {
     return `Not set up. This app cannot show the setup question. Run ${oneTimeCommandLine("setup", npmVersion)} in a terminal, then restart this app.`;
   }
@@ -110248,15 +110265,16 @@ function balanceLine(a, room = SAY_MAX_WORDS) {
     if (a.status === "reading") return "The first balance read of this wallet is not done yet. Ask again in 30 seconds.";
     if (a.refreshing === true) {
       const last = a.lastRead && usdcText(a.lastRead.privateAtomic) && Number.isSafeInteger(a.lastRead.ageMinutes) && a.lastRead.ageMinutes > 0 ? ` The last full read, ${ageWords(a.lastRead.ageMinutes)} ago, showed ${usdcText(a.lastRead.privateAtomic)} USDC private.` : "";
-      const lines = Number(a.refreshingSeconds) >= 60 ? [`Still reading the chain; it takes longer than usual.${last} Ask again in a minute.`, "The wallet is still reading the chain; this takes longer than usual. Ask again in a minute."] : [`Still reading the chain.${last} Ask again in about 30 seconds.`, "The wallet is still reading the chain. Ask again in about 30 seconds."];
-      return last ? lines.find((text3) => words(text3) <= SAY_MAX_WORDS) ?? lines[1] : lines[1];
+      const known = a.lastRead && usdcText(a.lastRead.privateAtomic) && Number.isSafeInteger(a.lastRead.ageMinutes) ? `Your last known balance is ${usdcText(a.lastRead.privateAtomic)} USDC private (${a.lastRead.ageMinutes > 0 ? `${ageWords(a.lastRead.ageMinutes)} ago` : "under a minute ago"}); the wallet is checking it now.` : "";
+      const lines = Number(a.refreshingSeconds) >= 60 ? [known && `${known} Ask again in a minute.`, last && `Still reading the chain; it takes longer than usual.${last} Ask again in a minute.`, "The wallet is still reading the chain; this takes longer than usual. Ask again in a minute."] : [known && `${known} Ask again in about 30 seconds.`, last && `Still reading the chain.${last} Ask again in about 30 seconds.`, "The wallet is still reading the chain. Ask again in about 30 seconds."];
+      return lines.find((text3) => text3 && words(text3) <= SAY_MAX_WORDS) ?? lines.at(-1);
     }
     const why = refreshErrorWords(str(a.refreshError), a.lockedBy);
     return why ? `Your private balance is not known yet: ${why}. Ask again in a minute.` : "Your private balance is not known yet. Ask again in a minute.";
   }
   const refund = usdcText(a.breakdown?.refundsInFlightAtomic);
   const have = (rest, shorter = rest) => {
-    const named = positive(refund) ? [`(${refund} of it is a refund on its way)`, `(${refund} refund on its way)`, `(${refund} refunding)`] : [];
+    const named = !positive(refund) ? [] : a.refreshReason === "refund_check" ? [`(${refund} of it is a refund; the wallet is checking that it arrived)`, `(${refund} of it is a refund being checked)`, `(${refund} refund being checked)`] : [`(${refund} of it is a refund on its way)`, `(${refund} refund on its way)`, `(${refund} refunding)`];
     const line = [rest, shorter].flatMap((tail) => named.map((part) => `You have ${balance} USDC private ${part}${tail}`)).find((text3) => words(text3) <= SAY_MAX_WORDS);
     return line ?? `You have ${balance} USDC private${rest}`;
   };
@@ -125682,6 +125700,14 @@ function oneBalance(report, store, walked) {
     }
   };
 }
+function refundFromOldWalk(store, report) {
+  try {
+    if ((report?.detail?.lastRefresh?.ageSeconds ?? 0) * 1e3 < INBOUND_REFRESH_AGE_MS) return false;
+    return floatRefundsInFlightAtomic(store, readBalanceSnapshot(store).snapshot) > 0n;
+  } catch {
+    return false;
+  }
+}
 function localBalance(session) {
   try {
     return localBalanceOf(session.openStore());
@@ -127565,7 +127591,7 @@ ${canonical5}`;
   const balance = {
     name: "wallet_balance",
     title: "Balance",
-    description: `Use this when the user asks "what is my balance" or "how much USDC do I have": it answers ONE balance (balanceAtomic, what x402_pay can spend) and the public (unshielded) USDC. Pays nothing and signs nothing. When the user asks to see the wallet ("show my wallet"), print \`card\` as it is: at most 8 lines with the private balance, the public USDC, Tor on or off, the last 3 payments (time UTC, seller host, USDC), and example requests. balanceParts (only above 1): a send of all of it first gets the balance ready to send (next says the minutes; never say parts or join to the user). balanceAtomic is one number; breakdown names its parts (breakdown.shieldedAtomic is what wallet_unshield can send; privateSendPendingAtomic is the part of a running private send (wallet_unshield with parts or max_delay_minutes) not sent yet, already taken off shieldedAtomic; refundsInFlightAtomic is a Shinjuku refund on its way back; setAsideAtomic (only when not 0) is value an older version of this wallet set aside to pay sellers; during a pool move, pools lists each pool's part and movingAtomic is value on its way from the old pool to the new one; the move field shows the move, poolSwitches each switch). UNSHIELDED (unshieldedAtomic) is the plain public USDC on the wallet's own Solana key (ownAddress), the USDC wallet_shield makes private; unshieldedSolLamports is that key's SOL, information only: wallet_shield needs none (the facilitator's relayer pays every fee and rent). When the local balance is stale (a new deposit, a received payment), it reads the chain by itself first; when that takes longer than about 20 s it answers the last balance with refreshing: true and finishes in the background (call wallet_balance again in 30 s). A balance with refreshing: true and refreshReason is exact (payment_settling: a payment settles and the number counts it; account_join: the wallet gets its own balance ready to send and the number counts all of it; pool_move: value from the old pool arrives and the number counts it; first_check: a new wallet's first history check, the number is its own landed deposits). status reading (balanceAtomic null): the first balance read of a wallet that may hold money is not done; call wallet_balance again in 30 s. If the public read fails, unshieldedAtomic is null with unshieldedReason; the rest still answers. ownKeyTokens (only when there are any): the other tokens on ownAddress (not its USDC), each { mint, amountAtomic, decimals, amount }, at most 10 (ownKeyTokensMore counts the rest); a token is its mint, never a name or symbol; wallet_transfer_token with that mint as token_mint sells one and sends the USDC privately. earlierDeposits (only when there are any): USDC found at a one-time deposit address of an earlier pool, each with a notice line to tell the user; the wallet moves it into the current pool by itself. addFunds (only when there are any): each wallet_add_funds address still open, with its state and the USDC known to wait there (heldAtomic; null with heldNote when the address was not checked yet). startsAtNextRequest true (old name): its deposit is not sent yet; once the wallet has seen USDC there, it sends it by itself in about startsInMinutes + 1 minutes, in every host, with no ask. landingAtomic (only when not 0): USDC you added whose deposit landed on chain and that balanceAtomic does not count yet; this call finishes it and waits about 20 s for it, past that it is being counted: call wallet_balance again as next says (at once in the same turn when this call waited its 20 s, else in 30 s). session shows the spending limits (null or "none": no limit), what is left, where the limits come from, and how to change them (session.summary). verbose: true adds \`internal\` (accounts, notes, and other engineering numbers); the default answer leaves them out. To add money, use wallet_add_funds. Amounts are atomic units (USDC: 1000000 = 1 USDC); say and usdc give them in USDC.`,
+    description: `Use this when the user asks "what is my balance" or "how much USDC do I have": it answers ONE balance (balanceAtomic, what x402_pay can spend) and the public (unshielded) USDC. Pays nothing and signs nothing. When the user asks to see the wallet ("show my wallet"), print \`card\` as it is: at most 8 lines with the private balance, the public USDC, Tor on or off, the last 3 payments (time UTC, seller host, USDC), and example requests. balanceParts (only above 1): a send of all of it first gets the balance ready to send (next says the minutes; never say parts or join to the user). balanceAtomic is one number; breakdown names its parts (breakdown.shieldedAtomic is what wallet_unshield can send; privateSendPendingAtomic is the part of a running private send (wallet_unshield with parts or max_delay_minutes) not sent yet, already taken off shieldedAtomic; refundsInFlightAtomic is a Shinjuku refund on its way back; setAsideAtomic (only when not 0) is value an older version of this wallet set aside to pay sellers; during a pool move, pools lists each pool's part and movingAtomic is value on its way from the old pool to the new one; the move field shows the move, poolSwitches each switch). UNSHIELDED (unshieldedAtomic) is the plain public USDC on the wallet's own Solana key (ownAddress), the USDC wallet_shield makes private; unshieldedSolLamports is that key's SOL, information only: wallet_shield needs none (the facilitator's relayer pays every fee and rent). When the local balance is stale (a new deposit, a received payment), it reads the chain by itself first; when that takes longer than about 20 s it answers the last balance with refreshing: true and finishes in the background (call wallet_balance again in 30 s). A balance with refreshing: true and refreshReason is exact (payment_settling: a payment settles and the number counts it; account_join: the wallet gets its own balance ready to send and the number counts all of it; pool_move: value from the old pool arrives and the number counts it; refund_check: a refund counted from an old read, which the wallet checks now (never tell the user it is still on its way); first_check: a new wallet's first history check, the number is its own landed deposits). status reading (balanceAtomic null): the first balance read of a wallet that may hold money is not done; call wallet_balance again in 30 s. If the public read fails, unshieldedAtomic is null with unshieldedReason; the rest still answers. ownKeyTokens (only when there are any): the other tokens on ownAddress (not its USDC), each { mint, amountAtomic, decimals, amount }, at most 10 (ownKeyTokensMore counts the rest); a token is its mint, never a name or symbol; wallet_transfer_token with that mint as token_mint sells one and sends the USDC privately. earlierDeposits (only when there are any): USDC found at a one-time deposit address of an earlier pool, each with a notice line to tell the user; the wallet moves it into the current pool by itself. addFunds (only when there are any): each wallet_add_funds address still open, with its state and the USDC known to wait there (heldAtomic; null with heldNote when the address was not checked yet). startsAtNextRequest true (old name): its deposit is not sent yet; once the wallet has seen USDC there, it sends it by itself in about startsInMinutes + 1 minutes, in every host, with no ask. landingAtomic (only when not 0): USDC you added whose deposit landed on chain and that balanceAtomic does not count yet; this call finishes it and waits about 20 s for it, past that it is being counted: call wallet_balance again as next says (at once in the same turn when this call waited its 20 s, else in 30 s). session shows the spending limits (null or "none": no limit), what is left, where the limits come from, and how to change them (session.summary, only when a limit is set; with none, say nothing about limits, and never tell the user the session counters (sessionSpentAtomic, sessionMovedAtomic): they are limit bookkeeping and may count earlier conversations). verbose: true adds \`internal\` (accounts, notes, and other engineering numbers); the default answer leaves them out. To add money, use wallet_add_funds. Amounts are atomic units (USDC: 1000000 = 1 USDC); say and usdc give them in USDC.`,
     inputSchema: { type: "object", properties: {
       verbose: { type: "boolean", description: "Optional. true adds `internal`: the engineering numbers (funded accounts, notes, payments without waiting, a 0 set-aside value). Default false." }
     }, additionalProperties: false },
@@ -127640,6 +127666,17 @@ ${canonical5}`;
         });
         const cause = staleCauseOf(report);
         refresh = { refreshing: true, ...cause === void 0 ? {} : { refreshReason: cause } };
+      } else if (report.split?.shieldedAtomic != null && !recentlyFailed && !finalityWait && refundFromOldWalk(store, report)) {
+        const outcome = await Promise.race([refreshShared().then(() => "done", () => "failed"), sleep2(balanceRefreshWaitMs).then(() => "waiting")]);
+        if (outcome === "done") {
+          try {
+            store = session.openStore();
+          } catch {
+          }
+          report = computeBalance({ store, snapshotRead: readBalanceSnapshot(store), source: "refresh" });
+          walkedOne = void 0;
+          refresh = { refreshed: true };
+        } else refresh = { refreshing: true, refreshReason: "refund_check" };
       } else if (report.split?.shieldedAtomic != null && !recentlyFailed && !finalityWait && !refreshRun && (report.detail?.lastRefresh?.ageSeconds ?? 0) * 1e3 >= INBOUND_REFRESH_AGE_MS) {
         refreshShared({ background: true }).catch(() => {
         });
@@ -127977,7 +128014,8 @@ ${canonical5}`;
       const { setAsideAtomic, ...breakdownRest } = one.breakdown;
       const breakdown = setAsideAtomic === "0" ? breakdownRest : one.breakdown;
       if (setAsideAtomic === "0") internal.setAsideAtomic = "0";
-      const capWords = (atomic4) => atomic4 === void 0 || atomic4 === null || String(atomic4) === NO_LIMIT_ATOMIC2 ? "no limit" : `${usdcText2(atomic4)} USDC`;
+      const noLimit = (atomic4) => atomic4 === void 0 || atomic4 === null || String(atomic4) === NO_LIMIT_ATOMIC2;
+      const capWords = (atomic4) => noLimit(atomic4) ? "no limit" : `${usdcText2(atomic4)} USDC`;
       let countStore = store;
       try {
         countStore = session.openStore();
@@ -127988,7 +128026,7 @@ ${canonical5}`;
       } catch {
       }
       const sessionLeft = sessionLeftShown(policy, countStore);
-      const sessionSummary = `Spending limits: ${capWords(policy.limits.maxPaymentAtomic)} per payment and ${capWords(policy.limits.maxSessionAtomic)} in any 24 hours, for this wallet (every MCP process counts; a pool upgrade starts a new 24-hour count)${sessionLeft === null ? "" : ` (${usdcText2(sessionLeft)} USDC left now)`}; ${usdcText2(policy.sessionSpentAtomic) ?? "0"} USDC paid in the last 24 hours. --max-payment comes from ${capPlaceWords("--max-payment")}, and --max-session from ${capPlaceWords("--max-session")}. To change one from the host's entry, edit that flag (in USDC, like 0.05) in the host's entry for shinjuku-shielded; to change one from setup, run ${terminalCommand("setup --yes --max-payment <usdc> --max-session <usdc>")} in a terminal; then restart the host. The wallet file also holds its own limits (--max-payment, and --max-cumulative for all payments together): ${terminalCommand("limits")} shows and changes them`;
+      const sessionSummary = noLimit(policy.limits.maxPaymentAtomic) && noLimit(policy.limits.maxSessionAtomic) ? void 0 : `Spending limits: ${capWords(policy.limits.maxPaymentAtomic)} per payment and ${capWords(policy.limits.maxSessionAtomic)} in any 24 hours, for this wallet (every MCP process counts; a pool upgrade starts a new 24-hour count)${sessionLeft === null ? "" : ` (${usdcText2(sessionLeft)} USDC left now)`}; ${usdcText2(policy.sessionSpentAtomic) ?? "0"} USDC paid in the last 24 hours. --max-payment comes from ${capPlaceWords("--max-payment")}, and --max-session from ${capPlaceWords("--max-session")}. To change one from the host's entry, edit that flag (in USDC, like 0.05) in the host's entry for shinjuku-shielded; to change one from setup, run ${terminalCommand("setup --yes --max-payment <usdc> --max-session <usdc>")} in a terminal; then restart the host. The wallet file also holds its own limits (--max-payment, and --max-cumulative for all payments together): ${terminalCommand("limits")} shows and changes them`;
       return json3({
         ok: true,
         ...reportPublic,
@@ -128016,7 +128054,7 @@ ${canonical5}`;
         session: {
           ...shownCaps({ ...policy.limits, sessionLeftAtomic: sessionLeft }),
           sessionSpentAtomic: policy.sessionSpentAtomic,
-          summary: sessionSummary,
+          ...sessionSummary ? { summary: sessionSummary } : {},
           shield: shieldEnabled ? { maxShieldAtomic: money.maxShieldAtomic ?? null, ...movedFields("shield", capOf2(money.maxShieldAtomic)) } : null,
           unshield: unshieldEnabled ? {
             maxUnshieldAtomic: money.maxUnshieldAtomic ?? null,
@@ -128903,7 +128941,13 @@ ${canonical5}`;
     return Boolean(plan) && plan.parts.some((part) => selfPayMayHaveSigned(store, part.unshieldId));
   }
   const unboundNext = (requestId, amountAtomic) => `Nothing was signed. Do not retry this request_id. Tell your owner: the self-payment of this unshield has no recipient bound to it, so this server will not choose one. The owner finishes it with the CLI: shinjuku unshield (the same --wallet, proof tools, --profile, --program, --facilitator) --unshield-id ${moneyId(requestId)} --amount ${usdcFlagText(amountAtomic)} --to <recipient USDC account> --recipient-owner <recipient owner>`;
-  const preApproved = () => [...new Set(unshieldTo)];
+  const preApproved = () => [.../* @__PURE__ */ new Set([...unshieldTo, ...typeof money.unshieldToNow === "function" ? money.unshieldToNow() : []])];
+  const ownAddressCommand = () => {
+    const line = terminalCommand("setup");
+    const home = process.env.SHIELDED_WALLET_HOME;
+    return home ? `${line} (with SHIELDED_WALLET_HOME set to ${home}, as in this app's entry)` : line;
+  };
+  const ownAddressNext = () => `Nothing was sent. Do not retry with another address, and do not run setup yourself. Tell the user: this app could not show you the address to confirm, so nothing was sent. If it is your own wallet, open a terminal and run ${ownAddressCommand()}; it asks for your wallet address (type or paste it there), then ask again here`;
   async function anchorWaitAfterDeposit() {
     try {
       const read = await underLease((store) => readBalanceSnapshot(store));
@@ -128917,13 +128961,14 @@ ${canonical5}`;
       return {};
     }
   }
+  const BACKUP_SAVED_NEXT = ". Tell the user a backup of the wallet was saved (say only that; its folder is in backupPath if the user asks)";
   function doneNext(kind, job) {
     if (kind === "unshield" && job.result?.privateSend) {
-      return sendDoneNext(job.to, job.result.privateSend) + `${job.result?.backupPath ? `. An encrypted backup of the wallet was saved at ${job.result.backupPath}` : ""}`;
+      return sendDoneNext(job.to, job.result.privateSend) + `${job.result?.backupPath ? BACKUP_SAVED_NEXT : ""}`;
     }
     if (kind === "unshield") {
       const tx = job.result?.exitTransaction;
-      return `Sent ${usdcText2(job.amountAtomic)} USDC to ${job.to}${typeof tx === "string" ? ` (transaction ${tx})` : ""}. Tell the user; nothing to do: the private balance shows it in a few seconds (wallet_balance)${job.result?.backupPath ? `. An encrypted backup of the wallet was saved at ${job.result.backupPath}` : ""}`;
+      return `Sent ${usdcText2(job.amountAtomic)} USDC to ${job.to}${typeof tx === "string" ? ` (transaction ${tx})` : ""}. Tell the user; nothing to do: the private balance shows it in a few seconds (wallet_balance)${job.result?.backupPath ? BACKUP_SAVED_NEXT : ""}`;
     }
     const post = job.post;
     if (!post || post.state === "running") {
@@ -128931,9 +128976,9 @@ ${canonical5}`;
     }
     if (!post.refreshed) return `the deposit landed; reading it from the chain failed (${post.refreshError}): call wallet_balance in a minute, it retries by itself`;
     if (post.spendableAtMs !== void 0 && post.spendableAtMs > Date.now()) {
-      return `the deposit landed and is in the shielded balance. It is spendable in about ${Math.ceil((post.spendableAtMs - Date.now()) / 1e3)} s: x402_pay and wallet_unshield wait for it by themselves, so call them now if the user wants to${post.backupPath ? `. An encrypted backup of the wallet was saved at ${post.backupPath}` : ""}`;
+      return `the deposit landed and is in the shielded balance. It is spendable in about ${Math.ceil((post.spendableAtMs - Date.now()) / 1e3)} s: x402_pay and wallet_unshield wait for it by themselves, so call them now if the user wants to${post.backupPath ? BACKUP_SAVED_NEXT : ""}`;
     }
-    return `the deposit landed and is in the shielded balance: x402_pay and wallet_unshield can spend it now${post.backupPath ? `. An encrypted backup of the wallet was saved at ${post.backupPath}` : ""}`;
+    return `the deposit landed and is in the shielded balance: x402_pay and wallet_unshield can spend it now${post.backupPath ? BACKUP_SAVED_NEXT : ""}`;
   }
   const ELSEWHERE_PRIVACY = "the chain shows the other wallet paying this new one-time address, and that address depositing this amount into the pool (both public; the facilitator also sees the amount and time). Later payments from the shielded balance do not show which deposit paid them. With few depositors in the pool, an amount few other deposits share, or a payment soon after the deposit, is easier to pair";
   const reclaimHow = (requestId) => `only the owner can take it back, with the CLI: shinjuku deposit-reclaim --deposit-id ${elsewhereId(requestId)} --to <a USDC token account> --fee-payer-key-file <a key with a little SOL> (with --pool, --program, --rpc); the chain then links that key and --to to the address`;
@@ -129068,6 +129113,7 @@ ${canonical5}`;
       ...refused ? { stage: "refused" } : { stage: "failed", failedStage: job.failedStage },
       ...job.error.largestReceivedAtomic ? { largestReceivedAtomic: job.error.largestReceivedAtomic } : {},
       ...job.error.libraryCode ? { libraryCode: job.error.libraryCode } : {},
+      ...job.error.ownAddressCommand ? { ownAddressCommand: job.error.ownAddressCommand } : {},
       ...job.error.heldAll ? { heldAll: true } : {},
       ...job.error.balanceAtomic === "0" ? {
         balanceAtomic: "0",
@@ -130075,8 +130121,8 @@ ${canonical5}`;
           "mcp_unshield_to_not_allowed",
           "this address is not pre-approved, and this MCP client cannot ask the user to confirm a send (it did not declare MCP elicitation); nothing was sent",
           // No launch-flag how-to here (fault 8b; mcp5 2026-10-21): an agent or a page it read could use it to have the user allow its own address.
-          `Nothing was sent. Do not retry with another address. Tell the user: use an MCP app that shows the send question (it then asks the user to confirm each new address); the owner's README says how to pre-approve an address. Addresses allowed now: ${preApproved().join(", ") || "none"}`,
-          { requestId: request.requestId }
+          `${ownAddressNext()}. Addresses allowed now: ${preApproved().join(", ") || "none"}`,
+          { requestId: request.requestId, ownAddressCommand: ownAddressCommand() }
         );
       }
       if (kind === "unshield" && !record) {
@@ -130236,7 +130282,8 @@ ${canonical5}`;
           job.error = {
             code: "mcp_unshield_declined",
             detail: `${confirmed.why}; nothing was signed or sent`,
-            next: confirmed.unshown ? "Nothing was sent. This MCP client answered the send question at once, before the user could see it, so asking again here fails the same way. Tell the user it was not sent, and that the send works in an MCP app that shows the question to the user" : "Nothing was sent. Tell the user it was not sent. Send it only if the user asks again: then call wallet_unshield again (it asks the user again)"
+            ...confirmed.unshown ? { ownAddressCommand: ownAddressCommand() } : {},
+            next: confirmed.unshown ? `${ownAddressNext()}. Asking again in this app without it fails the same way` : "Nothing was sent. Tell the user it was not sent. Send it only if the user asks again: then call wallet_unshield again (it asks the user again)"
           };
           uncount(kind, key);
           log(`MCP_UNSHIELD_DECLINED requestId=${job.requestId}${confirmed.unshown ? " unshown=true" : ""}`);
@@ -132119,6 +132166,7 @@ ${canonical5}`;
     const usdcMin = usdcText2(BigInt(quote.minOutAtomic));
     const amount = formatAtomic(BigInt(request.amountAtomic), decimals);
     const message = `Sell ${amount} of token ${request.tokenMint} for about ${usdcOut} USDC (at least ${usdcMin}; price impact ${(Number(quote.priceImpactPct) * 100).toFixed(2)} %), shield it, and send it to ${request.to} as ${request.parts} parts, each after a random wait of up to ${request.maxDelayMinutes} min? The address receives USDC, not the token.`;
+    const askedAt = Date.now();
     try {
       const answer = await client.elicit({ message, requestedSchema: {
         type: "object",
@@ -132126,8 +132174,10 @@ ${canonical5}`;
         required: ["confirm"]
       } }, elicitTimeoutMs);
       if (answer?.action === "accept" && answer?.content?.confirm !== false) return { ok: true };
+      if (elicitUnshown(askedAt, answer)) return { ok: false, unshown: true, why: `this MCP client answered the confirmation in ${Date.now() - askedAt} ms without showing it to the user` };
       return { ok: false, why: answer?.action === "accept" ? "the user did not tick Sell and send" : answer?.action === "cancel" ? "the user closed the confirmation" : "the user declined" };
     } catch (error) {
+      if (error?.timedOut !== true && elicitUnshown(askedAt)) return { ok: false, unshown: true, why: "this MCP client could not show the confirmation to the user" };
       return { ok: false, why: error?.timedOut === true ? `no answer in ${Math.round(elicitTimeoutMs / 1e3)} s` : "the MCP client did not answer the confirmation" };
     }
   }
@@ -132188,8 +132238,8 @@ ${canonical5}`;
       return refuse12(
         "mcp_unshield_to_not_allowed",
         "this address is not pre-approved, and this MCP client cannot ask the user to confirm (it did not declare MCP elicitation); nothing was signed",
-        "Nothing was signed. Tell the user: use an MCP app that shows the send question; the owner's README says how to pre-approve an address",
-        { requestId: id }
+        ownAddressNext(),
+        { requestId: id, ownAddressCommand: ownAddressCommand() }
       );
     }
     let blocker;
@@ -132339,8 +132389,8 @@ ${canonical5}`;
         return refuse12(
           "mcp_unshield_declined",
           `${confirmed.why}; nothing was signed`,
-          "Nothing was sold or sent. Tell the user it was not done. Do it only if the user asks again: then call wallet_transfer_token again (it asks the user again)",
-          { requestId: id }
+          confirmed.unshown ? ownAddressNext() : "Nothing was sold or sent. Tell the user it was not done. Do it only if the user asks again: then call wallet_transfer_token again (it asks the user again)",
+          { requestId: id, ...confirmed.unshown ? { ownAddressCommand: ownAddressCommand() } : {} }
         );
       }
       approval = { by: "elicitation", at: (/* @__PURE__ */ new Date()).toISOString() };
@@ -134638,6 +134688,7 @@ async function openWalletServer({
   noShield = false,
   maxShieldAtomic,
   unshieldTo,
+  unshieldToNow,
   maxUnshieldAtomic,
   exitProofToolsPath,
   profilePath,
@@ -134680,7 +134731,8 @@ async function openWalletServer({
     {
       ...fixedMoney,
       autoPockets: autoPockets !== false,
-      readyPockets: readyText ? Number(readyText) : DEFAULT_READY_POCKETS
+      readyPockets: readyText ? Number(readyText) : DEFAULT_READY_POCKETS,
+      ...typeof unshieldToNow === "function" ? { unshieldToNow } : {}
     },
     Object.fromEntries(Object.keys(live).map((key) => [key, { get: () => live[key], enumerable: true }]))
   ));
@@ -135416,7 +135468,7 @@ async function runChat({ io, values, deps = {} }) {
       if (code2 === "inference_tor_required" || code2 === "ECONNREFUSED" || proxyRefusedConnection(error)) {
         say6(`Your private connection (Tor) stopped answering, so the question could not go out. ${paidWords} Start Tor again, then ${again}.`);
       } else if (INSUFFICIENT2.test(code2 ?? "")) {
-        say6(`Your private balance is too low for this answer. ${paidWords} Add funds: ${FUND_COMMAND} (whole USDC from an exchange), or ask your agent to add funds (from 0.01 USDC). Then ${again}.`);
+        say6(`Your private balance is too low for this answer. ${paidWords} Add funds: ${FUND_COMMAND} (any amount from 0.01 USDC: change 2 to the amount you want), or ask your agent to add funds. Then ${again}.`);
       } else if (CAP_CODES.test(code2 ?? "")) {
         say6(`This answer would pass the chat's cap. ${paidWords} ${capsLine2()} End the chat (/exit) and start it again, with a higher --max-payment <usdc> or --max-session <usdc> when you want more.`);
       } else if (code2 === "inference_no_provider") {
@@ -155910,7 +155962,7 @@ import { resolve as resolve40 } from "node:path";
 
 // wallet/src/cli/shinjukuWallet.mjs
 init_fs();
-var import_web3138 = __toESM(require_index_cjs(), 1);
+var import_web3139 = __toESM(require_index_cjs(), 1);
 init_esm2();
 init_shielded_wallet();
 init_walk();
@@ -155936,6 +155988,7 @@ init_config2();
 // wallet/src/setup/setup.mjs
 init_processLease();
 init_fs();
+var import_web3135 = __toESM(require_index_cjs(), 1);
 init_secretFile();
 init_recoveryFile();
 init_config2();
@@ -156076,6 +156129,27 @@ function readPassphrase(path, access) {
   if (text3.length < 8) throw fail40("setup_passphrase_too_short", "the passphrase in the passphrase file is shorter than 8 characters; nothing was created");
   return text3;
 }
+function addOwnAddress({ home, address: address5 }, deps) {
+  const config = readSetupConfig(home);
+  if (!config?.pool || !config.passphraseFile) throw fail40("setup_own_address_not_set_up", "this wallet home is not set up yet; config.json was not changed. Run setup first");
+  const old = [...config.unshieldTo ?? []];
+  if (old.includes(address5)) return { ownAddresses: old, dropped: [] };
+  let own;
+  try {
+    const passphrase2 = readSecretText(config.passphraseFile, "the passphrase file");
+    own = import_web3135.Keypair.fromSecretKey(Uint8Array.from(deps.openWalletStore(homeWalletPath(home, config.pool), passphrase2).state.solanaSecretKey)).publicKey.toBase58();
+  } catch {
+    own = void 0;
+  }
+  if (own === void 0) throw fail40("setup_own_address_unchecked", "setup could not open the wallet to check that the address is not this wallet's own; config.json was not changed. Run setup again");
+  if (own === address5) {
+    throw fail40("setup_own_address_is_wallet", `${own} is this wallet's own address. A send to it would link your sends to your deposits, so it is never approved. Give the address of another wallet you own (Phantom, Solflare, or an exchange's deposit address); config.json was not changed`);
+  }
+  const all = [...old, address5];
+  const kept = all.slice(-MAX_OWN_ADDRESSES);
+  writeSetupConfig(home, { ...config, unshieldTo: kept });
+  return { ownAddresses: kept, dropped: all.slice(0, all.length - kept.length) };
+}
 async function runSetup(options, deps = {}) {
   const home = resolve28(options.home);
   const now = deps.now ?? (() => /* @__PURE__ */ new Date());
@@ -156267,6 +156341,7 @@ async function runSetup(options, deps = {}) {
   const drainingHere = (releasePools?.migration?.from ?? []).filter((entry) => entry.pool !== identity.pool && existsSync(homeWalletPath(home, entry.pool)) && !(previousPools ?? []).some((known) => known.pool === entry.pool));
   if (drainingHere.length) previousPools = [...previousPools ?? [], ...drainingHere.map((entry) => ({ pool: entry.pool, program: entry.programId }))].slice(-8);
   const torTunnel = tor ? options.torTunnel ?? old?.torTunnel : void 0;
+  const unshieldTo = old?.unshieldTo ? [...old.unshieldTo] : [];
   const base = {
     schema: CONFIG_SCHEMA,
     ...identity,
@@ -156275,6 +156350,7 @@ async function runSetup(options, deps = {}) {
     caps,
     tor,
     ...torTunnel ? { torTunnel } : {},
+    ...unshieldTo.length ? { unshieldTo } : {},
     ...wallet.recoveryFile ? { recoveryFile: wallet.recoveryFile } : {},
     ...previousPools?.length ? { previousPools } : {}
   };
@@ -156362,6 +156438,7 @@ async function runSetup(options, deps = {}) {
     wallet,
     passphraseFile,
     passphraseGenerated,
+    ownAddresses: unshieldTo,
     proofTools: { dir: tools.dir, downloaded: tools.downloaded, folder: tools.folder },
     platform: platform.wsl ? "windows+wsl" : "linux",
     warnings,
@@ -157333,7 +157410,7 @@ init_cli3();
 
 // wallet/src/deposit/privacyCash.mjs
 init_fs();
-var import_web3137 = __toESM(require_index_cjs(), 1);
+var import_web3138 = __toESM(require_index_cjs(), 1);
 init_esm2();
 init_balance();
 init_chain2();
@@ -157347,7 +157424,7 @@ import { dirname as dirname30, join as join36, resolve as resolve32 } from "node
 import { fileURLToPath as fileURLToPath20, pathToFileURL as pathToFileURL2 } from "node:url";
 
 // wallet/src/deposit/privacyCashLocal.mjs
-var import_web3135 = __toESM(require_index_cjs(), 1);
+var import_web3136 = __toESM(require_index_cjs(), 1);
 init_esm2();
 init_chain2();
 import { randomInt as randomInt8 } from "node:crypto";
@@ -157425,7 +157502,7 @@ async function withoutPrivacyCashServer(operation) {
   }
 }
 async function currentTreeState(connection, ids) {
-  const info = await retryRpc2(() => connection.getAccountInfo(new import_web3135.PublicKey(ids.tree), "confirmed"));
+  const info = await retryRpc2(() => connection.getAccountInfo(new import_web3136.PublicKey(ids.tree), "confirmed"));
   if (!info || info.owner.toBase58() !== ids.program || info.data.length < TREE_ROOT_OFFSET + 32) fail43("pool_unreadable");
   const data = Buffer.from(info.data);
   return {
@@ -157434,7 +157511,7 @@ async function currentTreeState(connection, ids) {
   };
 }
 async function programFeeRule(connection, ids) {
-  const info = await retryRpc2(() => connection.getAccountInfo(new import_web3135.PublicKey(ids.globalConfig), "finalized"));
+  const info = await retryRpc2(() => connection.getAccountInfo(new import_web3136.PublicKey(ids.globalConfig), "finalized"));
   if (!info || info.owner.toBase58() !== ids.program || info.data.length < FEE_ERROR_MARGIN_OFFSET + 2) fail43("pool_unreadable");
   const data = Buffer.from(info.data);
   return { withdrawalFeeRate: BigInt(data.readUInt16LE(WITHDRAWAL_FEE_RATE_OFFSET)), feeErrorMargin: BigInt(data.readUInt16LE(FEE_ERROR_MARGIN_OFFSET)) };
@@ -157444,25 +157521,25 @@ function programMinimumFee(net2, rule) {
   return expected === 0n ? 0n : expected * (10000n - rule.feeErrorMargin) / 10000n;
 }
 function transactAccounts({ ids, nullifiers, signer, signerTokenAccount, recipient, recipientTokenAccount, feeRecipientTokenAccount }) {
-  const program = new import_web3135.PublicKey(ids.program);
-  const pda = (seed, value) => import_web3135.PublicKey.findProgramAddressSync([Buffer.from(seed), value], program)[0];
+  const program = new import_web3136.PublicKey(ids.program);
+  const pda = (seed, value) => import_web3136.PublicKey.findProgramAddressSync([Buffer.from(seed), value], program)[0];
   return [
-    { pubkey: new import_web3135.PublicKey(ids.tree), isSigner: false, isWritable: true },
+    { pubkey: new import_web3136.PublicKey(ids.tree), isSigner: false, isWritable: true },
     { pubkey: pda("nullifier0", nullifiers[0]), isSigner: false, isWritable: true },
     { pubkey: pda("nullifier1", nullifiers[1]), isSigner: false, isWritable: true },
     { pubkey: pda("nullifier0", nullifiers[1]), isSigner: false, isWritable: false },
     { pubkey: pda("nullifier1", nullifiers[0]), isSigner: false, isWritable: false },
-    { pubkey: new import_web3135.PublicKey(ids.globalConfig), isSigner: false, isWritable: false },
+    { pubkey: new import_web3136.PublicKey(ids.globalConfig), isSigner: false, isWritable: false },
     { pubkey: signer, isSigner: true, isWritable: true },
-    { pubkey: new import_web3135.PublicKey(ids.mint), isSigner: false, isWritable: false },
+    { pubkey: new import_web3136.PublicKey(ids.mint), isSigner: false, isWritable: false },
     { pubkey: signerTokenAccount, isSigner: false, isWritable: true },
     { pubkey: recipient, isSigner: false, isWritable: true },
     { pubkey: recipientTokenAccount, isSigner: false, isWritable: true },
-    { pubkey: new import_web3135.PublicKey(ids.vault), isSigner: false, isWritable: true },
+    { pubkey: new import_web3136.PublicKey(ids.vault), isSigner: false, isWritable: true },
     { pubkey: feeRecipientTokenAccount, isSigner: false, isWritable: true },
     { pubkey: TOKEN_PROGRAM_ID, isSigner: false, isWritable: false },
     { pubkey: ASSOCIATED_TOKEN_PROGRAM_ID, isSigner: false, isWritable: false },
-    { pubkey: import_web3135.SystemProgram.programId, isSigner: false, isWritable: false }
+    { pubkey: import_web3136.SystemProgram.programId, isSigner: false, isWritable: false }
   ];
 }
 async function proveTransact({ internals, sdk, encryptionService, inputs, paths, root, nextIndex, outputAmount, extAmount, fee, recipientTokenAccount, feeRecipientTokenAccount, mint, padChange = false }) {
@@ -157495,7 +157572,7 @@ async function proveTransact({ internals, sdk, encryptionService, inputs, paths,
   const extDataHashDecimal = BigInt(`0x${Buffer.from(extDataHash).reverse().toString("hex")}`).toString();
   const input = {
     root,
-    mintAddress: internals.getMintAddressField(new import_web3135.PublicKey(mint)),
+    mintAddress: internals.getMintAddressField(new import_web3136.PublicKey(mint)),
     publicAmount: publicAmount.toString(),
     extDataHash,
     inAmount: inputs.map((utxo) => utxo.amount.toString(10)),
@@ -157529,7 +157606,7 @@ async function proveTransact({ internals, sdk, encryptionService, inputs, paths,
   return { data, nullifiers: inputNullifiers.map(toBeBytes), outputs };
 }
 function compile({ payer, blockhash, instructions: instructions2, lookupTable, priceInstruction }) {
-  const build2 = (list) => new import_web3135.VersionedTransaction(new import_web3135.TransactionMessage({ payerKey: payer, recentBlockhash: blockhash, instructions: list }).compileToV0Message([lookupTable]));
+  const build2 = (list) => new import_web3136.VersionedTransaction(new import_web3136.TransactionMessage({ payerKey: payer, recentBlockhash: blockhash, instructions: list }).compileToV0Message([lookupTable]));
   const transaction = build2(priceInstruction ? [instructions2[0], priceInstruction, ...instructions2.slice(1)] : instructions2);
   let bytes2;
   try {
@@ -157561,7 +157638,7 @@ async function buildLocalDeposit({ internals, sdk, connection, ids, source, amou
     paths = [zeroPath(), zeroPath()];
   }
   const total = inputs.reduce((sum2, utxo) => sum2 + BigInt(utxo.amount.toString()), 0n) + BigInt(amount);
-  const placeholder = getAssociatedTokenAddressSync(new import_web3135.PublicKey(mint), new import_web3135.PublicKey(ids.feeRecipient), true, TOKEN_PROGRAM_ID);
+  const placeholder = getAssociatedTokenAddressSync(new import_web3136.PublicKey(mint), new import_web3136.PublicKey(ids.feeRecipient), true, TOKEN_PROGRAM_ID);
   const proved = await proveTransact({
     internals,
     sdk,
@@ -157577,28 +157654,28 @@ async function buildLocalDeposit({ internals, sdk, connection, ids, source, amou
     feeRecipientTokenAccount: placeholder,
     mint
   });
-  const sourceTokenAccount = getAssociatedTokenAddressSync(new import_web3135.PublicKey(mint), source, false, TOKEN_PROGRAM_ID);
-  const deposit = new import_web3135.TransactionInstruction({
-    programId: new import_web3135.PublicKey(ids.program),
+  const sourceTokenAccount = getAssociatedTokenAddressSync(new import_web3136.PublicKey(mint), source, false, TOKEN_PROGRAM_ID);
+  const deposit = new import_web3136.TransactionInstruction({
+    programId: new import_web3136.PublicKey(ids.program),
     keys: transactAccounts({
       ids,
       nullifiers: proved.nullifiers,
       signer: source,
       signerTokenAccount: sourceTokenAccount,
-      recipient: new import_web3135.PublicKey(ids.feeRecipient),
+      recipient: new import_web3136.PublicKey(ids.feeRecipient),
       recipientTokenAccount: placeholder,
       feeRecipientTokenAccount: placeholder
     }),
     data: proved.data
   });
-  const table = (await retryRpc2(() => connection.getAddressLookupTable(new import_web3135.PublicKey(ids.lookupTable)))).value;
+  const table = (await retryRpc2(() => connection.getAddressLookupTable(new import_web3136.PublicKey(ids.lookupTable)))).value;
   if (!table) fail43("pool_unreadable");
   const latest = await retryRpc2(() => connection.getLatestBlockhash("confirmed"));
   const transaction = compile({
     payer: source,
     blockhash: latest.blockhash,
-    instructions: [import_web3135.ComputeBudgetProgram.setComputeUnitLimit({ units: SDK_DEPOSIT_COMPUTE_UNITS }), deposit],
-    priceInstruction: import_web3135.ComputeBudgetProgram.setComputeUnitPrice({ microLamports: SDK_DEPOSIT_MICRO_LAMPORTS }),
+    instructions: [import_web3136.ComputeBudgetProgram.setComputeUnitLimit({ units: SDK_DEPOSIT_COMPUTE_UNITS }), deposit],
+    priceInstruction: import_web3136.ComputeBudgetProgram.setComputeUnitPrice({ microLamports: SDK_DEPOSIT_MICRO_LAMPORTS }),
     lookupTable: table
   });
   return {
@@ -157625,13 +157702,13 @@ async function readRelayConfig2({ serviceUrl: serviceUrl2, ids, fetchImpl = fetc
   let feeTokenAccount;
   let lookupTable;
   try {
-    feePayer = new import_web3135.PublicKey(config?.feePayer);
-    feeTokenAccount = new import_web3135.PublicKey(config?.feeTokenAccount);
-    lookupTable = new import_web3135.PublicKey(config?.lookupTable);
+    feePayer = new import_web3136.PublicKey(config?.feePayer);
+    feeTokenAccount = new import_web3136.PublicKey(config?.feeTokenAccount);
+    lookupTable = new import_web3136.PublicKey(config?.lookupTable);
   } catch {
     fail43("relay_config_invalid");
   }
-  if (config?.schema !== PRIVACY_CASH_RELAY_CONFIG_SCHEMA || config.programId !== ids.program || config.mint !== ids.mint || feePayer.toBase58() !== config.feePayer || lookupTable.toBase58() !== config.lookupTable || !feeTokenAccount.equals(getAssociatedTokenAddressSync(new import_web3135.PublicKey(ids.mint), feePayer, false, TOKEN_PROGRAM_ID)) || !atomic4(config.feeFloorAtomic) || !atomic4(config.minimumAtomic) || !atomic4(config.maximumAtomic) || !atomic4(config.computeUnitPriceMicroLamports) || !Number.isSafeInteger(config.computeUnitLimit) || config.computeUnitLimit < 3e5 || config.computeUnitLimit > 14e5) {
+  if (config?.schema !== PRIVACY_CASH_RELAY_CONFIG_SCHEMA || config.programId !== ids.program || config.mint !== ids.mint || feePayer.toBase58() !== config.feePayer || lookupTable.toBase58() !== config.lookupTable || !feeTokenAccount.equals(getAssociatedTokenAddressSync(new import_web3136.PublicKey(ids.mint), feePayer, false, TOKEN_PROGRAM_ID)) || !atomic4(config.feeFloorAtomic) || !atomic4(config.minimumAtomic) || !atomic4(config.maximumAtomic) || !atomic4(config.computeUnitPriceMicroLamports) || !Number.isSafeInteger(config.computeUnitLimit) || config.computeUnitLimit < 3e5 || config.computeUnitLimit > 14e5) {
     fail43("relay_config_mismatch");
   }
   return Object.freeze({
@@ -157654,8 +157731,8 @@ async function buildLocalWithdrawal({ internals, sdk, connection, ids, encryptio
   const total = inputs.reduce((sum2, utxo) => sum2 + BigInt(utxo.amount.toString()), 0n);
   const change = total - net2 - fee;
   if (change < 0n) fail43("withdraw_balance_insufficient");
-  const owner = new import_web3135.PublicKey(recipient);
-  const recipientTokenAccount = getAssociatedTokenAddressSync(new import_web3135.PublicKey(mint), owner, false, TOKEN_PROGRAM_ID);
+  const owner = new import_web3136.PublicKey(recipient);
+  const recipientTokenAccount = getAssociatedTokenAddressSync(new import_web3136.PublicKey(mint), owner, false, TOKEN_PROGRAM_ID);
   const proved = await proveTransact({
     internals,
     sdk,
@@ -157672,8 +157749,8 @@ async function buildLocalWithdrawal({ internals, sdk, connection, ids, encryptio
     mint,
     padChange: true
   });
-  const withdrawal = new import_web3135.TransactionInstruction({
-    programId: new import_web3135.PublicKey(ids.program),
+  const withdrawal = new import_web3136.TransactionInstruction({
+    programId: new import_web3136.PublicKey(ids.program),
     keys: transactAccounts({
       ids,
       nullifiers: proved.nullifiers,
@@ -157692,12 +157769,12 @@ async function buildLocalWithdrawal({ internals, sdk, connection, ids, encryptio
     payer: relay.feePayer,
     blockhash: latest.blockhash,
     instructions: [
-      import_web3135.ComputeBudgetProgram.setComputeUnitLimit({ units: relay.computeUnitLimit }),
+      import_web3136.ComputeBudgetProgram.setComputeUnitLimit({ units: relay.computeUnitLimit }),
       // Create with empty data, as Privacy Cash's relayer sends it (30 of 30 new recipients); the address is fresh.
-      createAssociatedTokenAccountInstruction(relay.feePayer, recipientTokenAccount, owner, new import_web3135.PublicKey(mint), TOKEN_PROGRAM_ID),
+      createAssociatedTokenAccountInstruction(relay.feePayer, recipientTokenAccount, owner, new import_web3136.PublicKey(mint), TOKEN_PROGRAM_ID),
       withdrawal
     ],
-    priceInstruction: relay.computeUnitPrice > 0n ? import_web3135.ComputeBudgetProgram.setComputeUnitPrice({ microLamports: relay.computeUnitPrice }) : void 0,
+    priceInstruction: relay.computeUnitPrice > 0n ? import_web3136.ComputeBudgetProgram.setComputeUnitPrice({ microLamports: relay.computeUnitPrice }) : void 0,
     lookupTable: table
   });
   return {
@@ -157745,15 +157822,15 @@ async function relayWithdrawal({ serviceUrl: serviceUrl2, transactionBase64, fet
 }
 
 // wallet/src/deposit/privacyCashTree.mjs
-var import_web3136 = __toESM(require_index_cjs(), 1);
+var import_web3137 = __toESM(require_index_cjs(), 1);
 init_chain2();
 init_proxy();
 init_sealedCache();
 init_reference2();
 import { createHash as createHash32, createPublicKey as createPublicKey6, verify as verify3 } from "node:crypto";
-var PROGRAM_ID = new import_web3136.PublicKey("9fhQBbumKEFuXtMBDw8AaQyAjCorLGJQiS3skWZdQyQD");
-var USDC_MINT2 = new import_web3136.PublicKey("EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v");
-var TREE_ACCOUNT = import_web3136.PublicKey.findProgramAddressSync([Buffer.from("merkle_tree"), USDC_MINT2.toBuffer()], PROGRAM_ID)[0];
+var PROGRAM_ID = new import_web3137.PublicKey("9fhQBbumKEFuXtMBDw8AaQyAjCorLGJQiS3skWZdQyQD");
+var USDC_MINT2 = new import_web3137.PublicKey("EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v");
+var TREE_ACCOUNT = import_web3137.PublicKey.findProgramAddressSync([Buffer.from("merkle_tree"), USDC_MINT2.toBuffer()], PROGRAM_ID)[0];
 var TREE_DEPTH3 = 26;
 var TREE_ACCOUNT_BYTES = 4136;
 var NEXT_INDEX_OFFSET = 40;
@@ -157966,7 +158043,7 @@ function transactionMessage(signature2, result) {
       decoded = decodeVersion1(raw);
     } else {
       if (raw[0] === 0 || raw[0] > 127) throw new Error("unknown transaction format");
-      const { message } = import_web3136.VersionedTransaction.deserialize(raw);
+      const { message } = import_web3137.VersionedTransaction.deserialize(raw);
       decoded = {
         message: raw.subarray(1 + 64 * raw[0]),
         first: raw.subarray(1, 65),
@@ -158311,7 +158388,7 @@ function countCoverDeposits(crowd, { sinceLeafIndex, sinceSlot, grossAtomic }) {
   return Object.freeze({ count: count2, from: crowd.from, lowerBound });
 }
 async function findUnspentNotes({ leaves, encryptionService, lightWasm, mint = USDC_MINT2, spent = [], knownSpent = /* @__PURE__ */ new Set() }) {
-  const mintAddress = new import_web3136.PublicKey(mint).toBase58();
+  const mintAddress = new import_web3137.PublicKey(mint).toBase58();
   const notes = [];
   for (const [index, leaf] of leaves.entries()) {
     let utxo;
@@ -158535,7 +158612,7 @@ function readSourceKeyFile(path) {
     fail45("key_file_invalid");
   }
   try {
-    return import_web3137.Keypair.fromSecretKey(Uint8Array.from(bytes2));
+    return import_web3138.Keypair.fromSecretKey(Uint8Array.from(bytes2));
   } catch {
     return fail45("key_file_invalid");
   }
@@ -158562,7 +158639,7 @@ async function tokenBalance(connection, tokenAccount, commitment = "finalized")
   try {
     account2 = await retryRpc2(async () => {
       try {
-        return await getAccount(connection, new import_web3137.PublicKey(tokenAccount), commitment, TOKEN_PROGRAM_ID);
+        return await getAccount(connection, new import_web3138.PublicKey(tokenAccount), commitment, TOKEN_PROGRAM_ID);
       } catch (error) {
         if (error instanceof TokenAccountNotFoundError) return null;
         throw error;
@@ -158585,7 +158662,7 @@ function assertDepositTransaction(transaction, { source, sourceTokenAccount, amo
   }
   const key = (index) => keys3.get(index)?.toBase58();
   if (key(0) !== source) fail45("deposit_transaction_unexpected");
-  const budget = import_web3137.ComputeBudgetProgram.programId.toBase58();
+  const budget = import_web3138.ComputeBudgetProgram.programId.toBase58();
   let unitLimit;
   let unitPrice;
   for (const instruction of message.compiledInstructions.filter((candidate) => key(candidate.programIdIndex) === budget)) {
@@ -158702,12 +158779,12 @@ async function privacyCashDeposit({ store, rpcUrl, treeRpcUrl, keyFile, amountAt
       }));
       return Object.freeze({ command: "privacy-cash deposit", settleOnly: true, source, deposits: deposits2 });
     }
-    const mint = new import_web3137.PublicKey(USDC_MINT3);
+    const mint = new import_web3138.PublicKey(USDC_MINT3);
     const sourceTokenAccount = getAssociatedTokenAddressSync(mint, keypair.publicKey, false, TOKEN_PROGRAM_ID).toBase58();
     const held = await tokenBalance(connection, sourceTokenAccount);
     if (held < amount) fail45("source_usdc_insufficient", { heldAtomic: held.toString() });
     if (await retryRpc2(() => connection.getBalance(keypair.publicKey, "finalized")) < MIN_SOURCE_LAMPORTS) fail45("source_sol_insufficient");
-    const [tree] = import_web3137.PublicKey.findProgramAddressSync([Buffer.from("merkle_tree"), mint.toBuffer()], new import_web3137.PublicKey(PRIVACY_CASH.program));
+    const [tree] = import_web3138.PublicKey.findProgramAddressSync([Buffer.from("merkle_tree"), mint.toBuffer()], new import_web3138.PublicKey(PRIVACY_CASH.program));
     const treeAccount = await retryRpc2(() => connection.getAccountInfo(tree, "finalized"));
     if (!treeAccount || treeAccount.owner.toBase58() !== PRIVACY_CASH.program || treeAccount.data.length < 4128) fail45("pool_unreadable");
     if (amount > Buffer.from(treeAccount.data).readBigUInt64LE(4120)) fail45("deposit_above_limit");
@@ -158866,8 +158943,8 @@ function relayedDeposit(store, depositId) {
   const record = store.readWal(`deposit-${depositId}`);
   if (!record) fail45("withdraw_no_relayed_deposit");
   if (record.schema !== DEPOSIT_WAL_SCHEMA || !record.relay) fail45("withdraw_not_a_relayed_deposit");
-  const owner = new import_web3137.PublicKey(record.relay.owner);
-  if (record.asset !== USDC_MINT3 || getAssociatedTokenAddressSync(new import_web3137.PublicKey(USDC_MINT3), owner, true, TOKEN_PROGRAM_ID).toBase58() !== record.relay.tokenAccount) {
+  const owner = new import_web3138.PublicKey(record.relay.owner);
+  if (record.asset !== USDC_MINT3 || getAssociatedTokenAddressSync(new import_web3138.PublicKey(USDC_MINT3), owner, true, TOKEN_PROGRAM_ID).toBase58() !== record.relay.tokenAccount) {
     fail45("withdraw_one_time_address_mismatch");
   }
   return { record, owner: record.relay.owner, tokenAccount: record.relay.tokenAccount, amount: BigInt(record.amountAtomic) };
@@ -159031,8 +159108,8 @@ function proofFacts(data) {
   }
   const first = data.subarray(NULLIFIERS_OFFSET2, NULLIFIERS_OFFSET2 + 32);
   const second = data.subarray(NULLIFIERS_OFFSET2 + 32, NULLIFIERS_OFFSET2 + 64);
-  const program = new import_web3137.PublicKey(PRIVACY_CASH.program);
-  const account2 = (seed, nullifier) => import_web3137.PublicKey.findProgramAddressSync([Buffer.from(seed), nullifier], program)[0].toBase58();
+  const program = new import_web3138.PublicKey(PRIVACY_CASH.program);
+  const account2 = (seed, nullifier) => import_web3138.PublicKey.findProgramAddressSync([Buffer.from(seed), nullifier], program)[0].toBase58();
   return {
     rootHex: data.subarray(ROOT_OFFSET, ROOT_OFFSET + 32).toString("hex"),
     nullifiersHex: [first.toString("hex"), second.toString("hex")],
@@ -159042,7 +159119,7 @@ function proofFacts(data) {
 function transactSplData(transactionBase64) {
   let transaction;
   try {
-    transaction = import_web3137.VersionedTransaction.deserialize(Buffer.from(transactionBase64, "base64"));
+    transaction = import_web3138.VersionedTransaction.deserialize(Buffer.from(transactionBase64, "base64"));
   } catch {
     fail45("withdraw_proof_unreadable");
   }
@@ -159091,7 +159168,7 @@ async function oneTimeAccountHistory(connection, tokenAccount, sinceMs) {
   const signatures = [];
   let before;
   for (let page = 0; page < 10; page += 1) {
-    const entries = await retryRpc2(() => connection.getSignaturesForAddress(new import_web3137.PublicKey(tokenAccount), { limit: 100, ...before ? { before } : {} }, "finalized"));
+    const entries = await retryRpc2(() => connection.getSignaturesForAddress(new import_web3138.PublicKey(tokenAccount), { limit: 100, ...before ? { before } : {} }, "finalized"));
     for (const entry of entries) {
       if (entry.blockTime && entry.blockTime * 1e3 < sinceMs) return signatures;
       if (entry.err === null) signatures.push(entry.signature);
@@ -159161,7 +159238,7 @@ async function earlierProofs(connection, record, walk = void 0) {
     const roots = /* @__PURE__ */ new Set([...finalized.roots, ...confirmed.roots]);
     const walked = walk ? (await walk()).synced : void 0;
     for (const proof of record.proofs) {
-      const keys3 = proof.nullifierAccounts.map((key) => new import_web3137.PublicKey(key));
+      const keys3 = proof.nullifierAccounts.map((key) => new import_web3138.PublicKey(key));
       if (walked) {
         const paid = proof.nullifiersHex.filter((nullifier) => walked.spentNullifiers.has(nullifier)).map((nullifier) => walked.spentNullifiers.get(nullifier));
         if (paid.length && paid.every((account2) => account2 !== null && account2 !== record.oneTimeTokenAccount)) continue;
@@ -159309,7 +159386,7 @@ async function privacyCashWithdraw({ store, rpcUrl, treeRpcUrl, keyFile, deposit
     if (uncounted && !holdOverride) fail45("withdraw_crowd_uncounted", { via, reason: uncounted });
     const recent = via === "sdk" ? await recentCrowd({ connection, seconds: CROWD_WINDOW_DAYS * 86400, now: Math.floor(chainNow / 1e3) }) : void 0;
     if (place && !uncounted && recent) countFrom(recent, { sinceLeafIndex: place.leafIndex, sinceSlot: place.slot }, "deposit");
-    const mint = new import_web3137.PublicKey(USDC_MINT3);
+    const mint = new import_web3138.PublicKey(USDC_MINT3);
     const encryptionService = noteKeys(sdk.utils, keypair);
     const storage = memoryStorage();
     const sdkConnection = connect2(rpcUrl, "confirmed");
@@ -159474,7 +159551,7 @@ async function privacyCashWithdraw({ store, rpcUrl, treeRpcUrl, keyFile, deposit
     let answer;
     try {
       answer = await watchedSdkWithdraw(() => quietly(() => sdk.utils.withdrawSPL({
-        recipient: new import_web3137.PublicKey(deposit.owner),
+        recipient: new import_web3138.PublicKey(deposit.owner),
         lightWasm: sdk.lightWasm,
         storage,
         publicKey: keypair.publicKey,
@@ -159978,8 +160055,8 @@ function fundingWait(ctx, held) {
   const { plan, store } = ctx;
   const decimals = Number(store.state.decimals ?? 6);
   const part = /^[0-9]{1,20}$/.test(String(held ?? "")) && BigInt(held) > 0n ? BigInt(held) : 0n;
-  const whole = part - part % 1000000n;
-  const holds = part > 0n ? `; it holds ${usdc5(part, decimals)} so far: send the rest${whole > 0n ? `, or stop add-funds (Ctrl-C) and rerun it with --amount ${usdcFlag(whole)} (take the rest back later with ${CLI} deposit-reclaim)` : ""}` : "";
+  const usable = plan.route === "privacy-cash" ? part - part % ONE_USDC : part >= PAY_ME_MIN_ATOMIC ? part : 0n;
+  const holds = part > 0n ? `; it holds ${usdc5(part, decimals)} so far: send the rest${usable > 0n ? `, or stop add-funds (Ctrl-C) and rerun it with --amount ${usdcFlag(usable)}${usable < part ? ` (take the rest back later with ${CLI} deposit-reclaim)` : ""}` : ""}` : "";
   return `${usdc5(plan.amountAtomic, decimals)} USDC (Solana SPL) at ${relayedDeposit2(store, plan)?.relay?.owner ?? "the one-time address"}${holds}`;
 }
 function splitFundingWait(ctx, waiting) {
@@ -161969,7 +162046,7 @@ function validateMcp(values, env) {
   for (const address5 of unshieldTo) {
     let canonical5 = false;
     try {
-      canonical5 = new import_web3138.PublicKey(address5).toBase58() === address5;
+      canonical5 = new import_web3139.PublicKey(address5).toBase58() === address5;
     } catch {
       canonical5 = false;
     }
@@ -162055,6 +162132,8 @@ function mcpServerOptions(values, deps) {
     ...values.has("--no-shield") ? { noShield: true } : {},
     ...values.has("--max-shield") ? { maxShieldAtomic: values.get("--max-shield") } : {},
     ...values.has("--unshield-to") ? { unshieldTo: values.get("--unshield-to") } : {},
+    // A mcp run from config.json reads the user's own addresses again on each send (setup --own-address after the start).
+    ...values.get(MCP_FROM_CONFIG) ? { unshieldToNow: () => ownAddressesNow(values.get(MCP_FROM_CONFIG).home) } : {},
     ...values.has("--max-unshield") ? { maxUnshieldAtomic: values.get("--max-unshield") } : {},
     ...values.has("--exit-proof-tools") ? { exitProofToolsPath: values.get("--exit-proof-tools") } : {},
     ...values.has("--profile") ? { profilePath: values.get("--profile") } : {},
@@ -162369,10 +162448,10 @@ var fundArgvOf = (amount) => SETUP_FUND_ARGV.map((word, index) => SETUP_FUND_ARG
 var fundCommandText = (tor, amount = "2") => `${CLI2} ${fundArgvOf(amount).map(shellWord).join(" ")}${tor ? " --tor" : ""}`;
 function fundingStepText(tor) {
   return [
-    "Add money: the wallet starts empty. Two private ways:",
-    '  Any amount from 0.01 USDC (cents work): add the server to your agent host (above), then ask your agent "Add 0.50 USDC to my shielded balance". It calls wallet_add_funds and gives a one-time address: send that USDC on Solana from any wallet or exchange, and it becomes private a few minutes after it arrives, at the next wallet call (no SOL needed; our relayer pays every fee).',
-    `  From an exchange, in this terminal, whole USDC only: ${fundCommandText(tor)}`,
-    "     It prints a one-time address: withdraw exactly that amount of USDC (Solana SPL) from the exchange to it, and it shields the USDC by itself (our relayer pays every fee). --amount is in USDC (2 = 2 USDC): change it to the amount you want.",
+    "Add money: the wallet starts empty. Two private ways, each for any amount from 0.01 USDC:",
+    `  In this terminal: ${fundCommandText(tor)}`,
+    "     It prints a one-time address and its QR code: send exactly that amount of USDC (Solana SPL) to it from an exchange or a phone wallet, and it makes the USDC private by itself (our relayer pays every fee). --amount is in USDC (2 = 2 USDC, 0.05 = 5 cents): change it to the amount you want.",
+    '  Or ask your agent: add the server to your agent host (above), then ask "Add 0.50 USDC to my private balance". It calls wallet_add_funds and gives a one-time address: send that USDC on Solana from any wallet or exchange, and it becomes private a few minutes after it arrives, at the next wallet call (no SOL needed; our relayer pays every fee).',
     ""
   ].join("\n");
 }
@@ -162387,8 +162466,8 @@ function privateInferencePath(config, { apiKey } = {}) {
     text: [
       "Private inference: your agent's first private AI answer in five steps.",
       `  1. Fund: ${fundCommandText(true)}`,
-      "     It prints a one-time address: withdraw exactly that amount of USDC (Solana SPL) from an exchange to it. --amount is in USDC and add-funds takes whole USDC only (2 = 2 USDC): change it to the amount you want. For less than 1 USDC (from 0.01 USDC), use the MCP way below.",
-      "     Or, for any amount from 0.01 USDC, let the agent fund it over MCP: ask it to add funds; the tool wallet_add_funds gives a one-time address for USDC in another wallet or an exchange.",
+      "     It prints a one-time address and its QR code: send exactly that amount of USDC (Solana SPL) to it from an exchange or a phone wallet. --amount is in USDC, any amount from 0.01 (2 = 2 USDC, 0.05 = 5 cents): change it to the amount you want.",
+      "     Or let the agent fund it over MCP: ask it to add funds; the tool wallet_add_funds gives a one-time address for USDC in another wallet or an exchange.",
       "  2. Shield: add-funds does it. It moves the USDC into the shielded pool (our relayer pays every fee) and says ready with your balance; all of it stays there, where infer pays from.",
       `  3. First private call (a short qwen3-8-flash answer costs about 0.0013 USDC: the AI provider's price plus the 0.001 USDC Shinjuku fee; setup never pays one). It needs no flags: config.json gives the wallet, the caps, and Tor:`,
       `     echo "Say hello" | ${CLI2} infer -`,
@@ -162405,14 +162484,39 @@ function privateInferencePath(config, { apiKey } = {}) {
     ].join("\n")
   };
 }
+async function askOwnAddress(deps, recorded = []) {
+  const question = recorded.length ? `Your own wallet addresses now: ${recorded.join(", ")}. Add another one (Phantom, Solflare, or an exchange)? Paste it, or press Enter to skip: ` : "Your own wallet address (Phantom, Solflare, or an exchange), for sending money back to yourself? Paste it, or press Enter to skip: ";
+  for (let attempt = 0; attempt < 3; attempt += 1) {
+    const answer = String(await deps.ask(question)).trim();
+    if (!answer || /^(n|no|skip)$/i.test(answer)) return void 0;
+    if (isOwnAddressText(answer)) return answer;
+    deps.io.err("That is not a Solana address (32 to 44 letters and digits, as your wallet app shows it). Paste it again, or press Enter to skip.\n");
+  }
+  deps.io.err(`No address recorded. To add one later, run ${CLI2} setup again in a terminal and paste it at this question.
+`);
+  return void 0;
+}
+var ownAddressLine = (list) => `  own address  ${list.join(", ")}: your agent sends money back to you there without asking each time`;
+function recordOwnAddress(home, address5, deps) {
+  try {
+    const { ownAddresses, dropped } = addOwnAddress({ home, address: address5 }, setupDependencies(deps));
+    return [
+      ownAddressLine(ownAddresses),
+      ...dropped.length ? [`  note         config.json keeps ${MAX_OWN_ADDRESSES} own addresses: the oldest (${dropped.join(", ")}) now ask before each send`] : []
+    ];
+  } catch (error) {
+    const why = /^setup_own_address_[a-z_]+: /.test(String(error?.message)) ? error.message : "setup_own_address_unsaved: config.json could not be written";
+    return [`  note         your own address was not saved: ${why}`];
+  }
+}
 async function offerFundNow(deps, { tor }) {
   const io = deps.io;
   for (let attempt = 0; attempt < 3; attempt += 1) {
     const answer = String(await deps.ask("Fund and shield now? Amount in USDC (Enter to skip): ")).trim();
     if (!answer || /^(n|no|skip)$/i.test(answer)) break;
     const atomic4 = usdcToAtomic(answer);
-    if (!atomic4 || BigInt(atomic4) % 1000000n !== 0n) {
-      io.err(atomic4 ? "This step takes whole USDC only, like 2 (a relayed deposit is whole USDC, so its amount does not single you out). For less, or cents (from 0.01 USDC), skip here, add the server to your agent host, and ask your agent to add funds (wallet_add_funds). Type a whole number, or press Enter (or n) to skip.\n" : "Type a whole number of USDC, like 2, or press Enter (or n) to skip.\n");
+    if (!atomic4 || BigInt(atomic4) < PAY_ME_MIN_ATOMIC) {
+      io.err(atomic4 ? "The smallest amount is 0.01 USDC. Type an amount like 2 or 0.05, or press Enter (or n) to skip.\n" : "Type an amount of USDC, like 2 or 0.05, or press Enter (or n) to skip.\n");
       continue;
     }
     const argv2 = fundArgvOf(usdcFlagText(atomic4));
@@ -162423,7 +162527,7 @@ async function offerFundNow(deps, { tor }) {
     }
     return;
   }
-  io.out(`Not funded now. When you are ready, ask your agent to add funds (wallet_add_funds, from 0.01 USDC), or for whole USDC run: ${fundCommandText(tor)}
+  io.out(`Not funded now. When you are ready, run ${fundCommandText(tor)} (any amount from 0.01 USDC), or ask your agent to add funds.
 `);
 }
 function setupDependencies(deps) {
@@ -162568,7 +162672,7 @@ function setupArgvOf(values) {
   const usdcNames = new Set(COMMAND_BY_NAME.get("setup").flags.filter((spec) => spec.usdc).map((spec) => spec.name));
   const argv2 = [];
   for (const [name, value] of values) {
-    if (typeof name !== "string" || !name.startsWith("--")) continue;
+    if (typeof name !== "string" || !name.startsWith("--") || name === "--own-address") continue;
     if (value === true) argv2.push(name);
     else for (const each of Array.isArray(value) ? value : [value]) argv2.push(name, usdcNames.has(name) ? usdcFlagText(String(each)) : String(each));
   }
@@ -162593,21 +162697,33 @@ async function runSetupCommand(values, deps) {
   const home = setupHome(deps.env);
   const interactive = !values.has("--yes");
   const torRunRecords = !values.has("--prefer-tor") && !values.has("--no-tor") && childRunProxy(deps.env).args[0] === "--tor";
+  const terminal = deps.stdinIsTTY() && deps.stdoutIsTTY?.() === true;
+  if (values.has("--own-address") && !terminal) {
+    throw new PublicFailure(`setup_own_address_needs_terminal: your own address lets your agent send money to it without asking, so setup takes it only when you type or paste it in your own terminal (this run has none: a script, a pipe, or an agent's tool); nothing was changed. Run ${oneTimeCommandLine("setup", deps.walletVersion().npm)} in a terminal and paste the address at its question`);
+  }
+  if (values.has("--own-address") && !isOwnAddressText(values.get("--own-address"))) {
+    throw new UsageError(`--own-address takes one Solana address (32 to 44 letters and digits, as your wallet app shows it)${NOT_SHOWN}`, COMMAND_BY_NAME.get("setup"));
+  }
   if (interactive && !deps.stdinIsTTY()) {
     const line = ["setup", "--yes", ...setupArgvOf(values), ...childRunProxy(deps.env).args].map(shellWord).join(" ");
     throw new UsageError(
-      `setup asks its questions in a terminal; in a script or a pipe pass --yes: ${oneTimeCommandLine(line, deps.walletVersion().npm)} (add any of --max-payment, --max-session, --max-cumulative, --prefer-tor, --private-inference)`,
+      `setup asks its questions in a terminal; in a script or a pipe pass --yes: ${oneTimeCommandLine(line, deps.walletVersion().npm)} (add any of --max-payment, --max-session, --max-cumulative, --prefer-tor, --private-inference; your own wallet address is asked only in a terminal)`,
       COMMAND_BY_NAME.get("setup")
     );
   }
+  let ownAddress = values.get("--own-address");
   const old = setupConfigOf(home);
   const behindTor = (wanted) => wanted && !values.has("--no-tor") && !inProxiedRun(deps.env);
   if (!interactive && behindTor(values.has("--prefer-tor") || values.has("--private-inference") || old?.tor === true)) {
-    return setupBehindTor(setupArgvOf(values), deps);
+    await setupBehindTor(setupArgvOf(values), deps);
+    if (ownAddress) io.out(`${recordOwnAddress(home, ownAddress, deps).join("\n")}
+`);
+    return void 0;
   }
   const missing = missingPieces(home, old);
   const npmVersion = deps.walletVersion().npm;
   const introduced = values.has("--yes") && inProxiedRun(deps.env);
+  const asksOwnFirst = interactive && Boolean(old) && terminal && !ownAddress;
   io.out([
     ...introduced ? [] : [
       "Shinjuku Shield: a self-custody wallet that pays x402 URLs privately from a shielded USDC balance.",
@@ -162615,7 +162731,7 @@ async function runSetupCommand(values, deps) {
       `An agent host then starts it with one command: npx -y --no-audit --no-fund ${npxPackageWord(npmVersion)} mcp`,
       ""
     ],
-    old ? `Status: ${missing.includes("pool-retired") ? `set up before for a retired pool: ${retiredPoolText(old.pool, npmVersion).split("; run ")[0]}. This run moves config.json to the new pool and makes its wallet` : missing.length ? `set up before; missing now: ${missing.join(", ")}` : "set up; every piece is checked again"} (home ${home}).` : `Home: ${home}`,
+    old ? `Status: ${missing.includes("pool-retired") ? `set up before for a retired pool: ${retiredPoolText(old.pool, npmVersion).split("; run ")[0]}. This run moves config.json to the new pool and makes its wallet` : missing.length ? `set up before; missing now: ${missing.join(", ")}` : asksOwnFirst ? "set up" : "set up; every piece is checked again"} (home ${home}).` : `Home: ${home}`,
     ""
   ].join("\n"));
   const options = {
@@ -162646,6 +162762,26 @@ async function runSetupCommand(values, deps) {
       const answer = String(await deps.ask(`Set your LLM to private inference now? ${PRIVATE_INFERENCE_WHY} [y/N] `)).trim();
       privateInference = /^y(es)?$/i.test(answer);
     }
+    if (!ownAddress && terminal) ownAddress = await askOwnAddress(deps);
+  } else if (asksOwnFirst) {
+    ownAddress = await askOwnAddress(deps, old.unshieldTo ?? []);
+    if (!ownAddress && !missing.length) io.out("Every piece of the setup is checked again now.\n");
+  }
+  if (old && ownAddress && !missing.length && !setupArgvOf(values).length && !torRunRecords) {
+    let saved;
+    try {
+      saved = addOwnAddress({ home, address: ownAddress }, setupDependencies(deps));
+    } catch (error) {
+      if (/^setup_own_address_[a-z_]+: /.test(String(error?.message))) throw new PublicFailure(error.message);
+      throw error;
+    }
+    io.out([
+      `Saved: ${ownAddress} is your own address now, so your agent sends money back to you there without asking each time (no restart of your agent app needed).`,
+      ...saved.dropped.length ? [`config.json keeps ${MAX_OWN_ADDRESSES} own addresses: the oldest (${saved.dropped.join(", ")}) now ask before each send.`] : [],
+      "Nothing else changed. To check every piece of the setup again, run setup again and press Enter at the address question.",
+      ""
+    ].join("\n"));
+    return void 0;
   }
   const inference = inferenceRecordOf(old, privateInference);
   if (privateInference === true && (options.tor !== true || torRunRecords) && old?.tor !== true) {
@@ -162663,6 +162799,9 @@ async function runSetupCommand(values, deps) {
       ...privateInference === true && !values.has("--private-inference") ? ["--private-inference"] : []
     ];
     await setupBehindTor(["--yes", ...answers, ...setupArgvOf(values)], deps);
+    if (ownAddress) io.out(`${recordOwnAddress(home, ownAddress, deps).join("\n")}
+
+`);
     await offerFundNow(deps, { tor: setupConfigOf(home)?.tor === true });
     return void 0;
   }
@@ -162685,6 +162824,7 @@ Copy it to two offline places now; it is the only way to restore this wallet.
     if (/^(setup_[a-z_]+|secret_file_utf16): /.test(String(error?.message))) throw new PublicFailure(error.message);
     throw error;
   }
+  const own = ownAddress ? recordOwnAddress(home, ownAddress, deps) : summary.ownAddresses?.length ? [ownAddressLine(summary.ownAddresses)] : [];
   const lines = [
     "",
     "Shinjuku Shield is set up.",
@@ -162693,7 +162833,8 @@ Copy it to two offline places now; it is the only way to restore this wallet.
     `  passphrase   ${summary.passphraseFile}${summary.passphraseGenerated ? " (a new random passphrase; only you can read the file; it is never printed)" : ""}`,
     `  proof tools  ${summary.proofTools.folder} (${summary.proofTools.downloaded ? `${summary.proofTools.downloaded} files downloaded, every hash checked` : "already here, every hash checked"})`,
     // The setup warm ended well (setup/setupWarm.mjs); nothing is said when it did not.
-    ...summary.firstBalanceReady ? ["  balance      prepared during setup: your first balance after a deposit shows sooner"] : []
+    ...summary.firstBalanceReady ? ["  balance      prepared during setup: your first balance after a deposit shows sooner"] : [],
+    ...own
   ];
   if (summary.wallet.status === "created") {
     lines.push(
@@ -162739,9 +162880,12 @@ ${summary.privateInference === true ? privateInferencePath(config, { apiKey }).t
 function validateAddFunds(values) {
   const route = values.get("--route");
   if (!FUNDS_ROUTES.includes(route)) throw new UsageError("--route must be exchange, changenow, or privacy-cash (the value given is not repeated here)");
+  if (BigInt(values.get("--amount")) < PAY_ME_MIN_ATOMIC) {
+    throw new UsageError(`--amount must be at least ${usdcFlagText(PAY_ME_MIN_ATOMIC.toString())} USDC: the facilitator moves no smaller deposit into the pool`);
+  }
   const unit = RELAYED_DEPOSIT_UNIT[values.get("--pool")];
-  if (unit && BigInt(values.get("--amount")) % BigInt(unit) !== 0n) {
-    throw new UsageError(`--amount must be a whole number of USDC for this pool (a multiple of ${usdcFlagText(unit)} USDC, like 2): a relayed deposit takes whole units only. For an amount with cents (from 0.01 USDC), ask your agent to add funds: the MCP tool wallet_add_funds gives a one-time address that takes any amount`);
+  if (route === "privacy-cash" && unit && BigInt(values.get("--amount")) % BigInt(unit) !== 0n) {
+    throw new UsageError(`--route privacy-cash takes a whole number of USDC (a multiple of ${usdcFlagText(unit)} USDC, like 2): an odd amount singles out your Privacy Cash withdrawal. For an amount with cents (from 0.01 USDC), use --route exchange`);
   }
   if (values.has("--pockets") && !(/^(0|[1-9][0-9]?)$/.test(values.get("--pockets")) && Number(values.get("--pockets")) <= 20)) {
     throw new UsageError("--pockets must be a whole number from 0 to 20");
@@ -162905,7 +163049,7 @@ var COMMANDS = [
     env: [],
     flags: [
       flag2("--route", "<exchange|changenow|privacy-cash>", "where the USDC comes from: an exchange withdrawal, a ChangeNOW swap, or your own wallet through the Privacy Cash crowd", { required: true }),
-      flag2("--amount", "<usdc>", "USDC to add: a whole number of USDC (2 = 2 USDC)", { required: true, check: "atomic", usdc: true }),
+      flag2("--amount", "<usdc>", "USDC to add, from 0.01 (2 = 2 USDC, 0.05 = 5 cents); --route privacy-cash takes whole USDC", { required: true, check: "atomic", usdc: true }),
       flag2("--pool", "<address>", "the shielded pool", { required: true, check: "pubkey" }),
       flag2("--program", "<address>", "the shielded pool program", { required: true, check: "pubkey" }),
       flag2("--proof-tools", "<file>", "the public proof-tools manifest (the deposit, the pocket fill, and the balance read use it)", { required: true }),
@@ -162930,6 +163074,7 @@ var COMMANDS = [
     ],
     examples: [
       `${CLI2} add-funds --route exchange --amount 2 ${FUNDS_BASE}`,
+      `${CLI2} add-funds --route exchange --amount 0.05 ${FUNDS_BASE}`,
       `${CLI2} add-funds --route changenow --amount 3 ${FUNDS_BASE}`,
       `${CLI2} add-funds --route exchange --amount 2 --split 2 ${FUNDS_BASE}`,
       `${CLI2} add-funds --route exchange --amount 5 --split auto ${FUNDS_BASE}`,
@@ -162938,14 +163083,15 @@ var COMMANDS = [
     notes: [
       "One command instead of six. It runs the steps you would run by hand, in order, and waits between them by itself: deposit --relay (it records a one-time address of this wallet, then proves the deposit once that address holds the amount), deposit --relay --submit (our relayer moves it into the pool and pays every fee), pocket fill (only with --pockets 1 or more; after the dwell: 3 other pool events after your deposit, or a 1-minute cap, whichever comes first; a balance --refresh right before the fill reads the pool's history first), and balance --refresh. The privacy-cash route first runs privacy-cash deposit, waits its 24-hour hold, and only then records the one-time address and runs privacy-cash withdraw.",
       'Stages, as it prints them: address > funding > deposit > balance > ready, with dwell > pocket before balance when --pockets is 1 or more (privacy-cash: crowd-deposit > crowd-hold > address > crowd-withdraw > funding > ...). Each wait says what it waits for and when it tries again; the last line says "ready" with your balance and what the route still shows. The start line, the funding instructions, and every status line name what the route shows, and to whom. The balance you hold already pays during any wait: add-funds never holds the wallet while it waits.',
-      "exchange: withdraw exactly --amount USDC on Solana (SPL) from an exchange to the one-time address it prints. The exchange knows its customer; the chain shows only an exchange paying a new address. Minutes, then the dwell (at most about a minute).",
+      "exchange: withdraw exactly --amount USDC on Solana (SPL) from an exchange to the one-time address it prints (or scan its QR code with a phone wallet). The exchange knows its customer; the chain shows only an exchange paying a new address. Minutes, then the dwell (at most about a minute).",
+      "--amount takes any amount from 0.01 USDC, as the MCP tool wallet_add_funds. A whole number of USDC is the most private: many deposits have the same size. An amount with cents goes in as one deposit, and its size is easier to pick out on chain.",
       "changenow: a FIXED-rate ChangeNOW swap that delivers exactly --amount USDC on Solana to that address, paid with Monero (best: it hides the sender) or BTC or ETH. ChangeNOW sees the amount and the address. Minutes, then the dwell.",
       "privacy-cash: your own wallet (--from-key-file, with about 0.002 SOL) pays --crowd-amount into Privacy Cash; at least 24 hours (add-funds waits by this machine's clock; the withdrawal also checks the chain's time) and 10 real deposits later, Privacy Cash pays the one-time address, so the chain shows no transfer from your wallet to it (about a day; Privacy Cash's server still sees both steps with --via sdk). --crowd-amount is whole USDC and must cover --amount plus Privacy Cash's fee (0.35% plus about 0.72 USDC on 2026-09-30); with --via sdk the change left there must be 10 USDC or more, so a 2 USDC deposit takes --crowd-amount 13. Without --crowd-amount the withdrawal spends notes the key holds there already; the one-time address is read only 24 hours after the later of the newest Privacy Cash deposit this wallet file records (any key) and the moment this run chose the privacy-cash route; a deposit made outside this wallet file is covered only by that second rule. This route's order in add-funds (nothing reads the one-time address before the hold has passed; a random 30 to 120 minutes after a settle-only read) is checked by a run with no money, not yet live end to end.",
       "Until any USDC moved (the one-time address is not funded, and no Privacy Cash deposit was made), a run may change its route: rerun it with the other --route (and that route's flags); the one-time address stays the same. If more than --amount reaches the address, the deposit takes --amount and the rest stays at the address: add-funds and funds-status say how much, and what taking it back shows.",
       "Ctrl-C, a closed terminal, or a reboot loses nothing: every step keeps its own record. Rerun this same command and it continues at the stage where it stopped. To keep it running in the background: nohup <this command> > add-funds.log 2>&1 & (Windows: Start-Process). funds-status shows the stage from any terminal, and whether add-funds still runs.",
       "Back up (backup-export) when it prints the one-time address and again when it says ready: add-funds makes no backup itself. A restore from the recovery text alone still finds the deposit once it landed (recover), and USDC that waits at the one-time address (deposit-scan).",
       "A pocket fill moves your own money into your own pocket, so it takes none of the payment budget init set (--max-payment, --max-cumulative). Each payment from a pocket to a seller takes that budget, the same as any other payment.",
-      "It changes no rule: the crowd hold, the dwell, whole-USDC deposits, and every refusal are the single commands' own. A refusal that a later run clears (the hold, the crowd count, the dwell, a paused facilitator) is a wait; any other refusal stops it with that command's own line and hint (exit 1), and the rerun continues after your fix. It has no override flag: run the single command (for example privacy-cash withdraw --hold-override) when you choose to give up a wait.",
+      "It changes no rule: the crowd hold, the dwell, the deposit amounts, and every refusal are the single commands' own. A refusal that a later run clears (the hold, the crowd count, the dwell, a paused facilitator) is a wait; any other refusal stops it with that command's own line and hint (exit 1), and the rerun continues after your fix. It has no override flag: run the single command (for example privacy-cash withdraw --hold-override) when you choose to give up a wait.",
       "--tor (or --proxy): each step runs as its own Tor run, as if you typed it: a new circuit and its own Tor check. With --tor, --service may be the facilitator's http://<v3 onion>/ origin.",
       `--history-rpc: the balance --refresh and pocket fill steps (and the dwell check) read the pool's public history from it (${CLI2} help balance says what it sees); the deposit and Privacy Cash steps never get it. Without it, those two steps read from the history proxy this wallet pins for the pool (its onion with --tor, else https on the facilitator's pay host; --history-rpc own keeps them on your own RPC). add-funds does not keep it: give it again on each rerun. It never falls back to your own RPC: a failed source fails the step with history_rpc_failed, and add-funds handles that as it handles the step's other refusals.`,
       "In a terminal it shows one line per step and ends with a short summary (ready with your balance, or where it stopped and what to do); the wallet's own progress lines (Tor, the RPC relay, the pool history, the memo reads) show only with --verbose, and every warning or failure shows always. With --json, or when its output goes to a file or a program, it ends with the status as JSON, as funds-status prints it, and shows every progress line. While it waits for the USDC it checks the one-time address every 20 s for the first 5 minutes, then every 2 minutes.",
@@ -163562,6 +163708,7 @@ var COMMANDS = [
       bool2("--prefer-tor", "record Tor for mcp: it then runs behind Tor (needs Tor with HTTPTunnelPort 127.0.0.1:9080); mcp --no-tor skips it for one run. Setup itself then runs behind Tor too. setup --tor does the same: it runs setup behind Tor and records Tor for mcp"),
       bool2("--no-tor", "run this setup without Tor although Tor is recorded or asked for (the facilitator then sees this machine's IP address download the release and the proof tools); config.json still records Tor. With --tor it only stops --tor from recording Tor (the run itself still goes over Tor)"),
       bool2("--private-inference", 'answer yes to "Set your LLM to private inference now?": your agent buys AI answers from the AI provider, paid from your private balance over Tor. Records inference.enabled and Tor (as --prefer-tor) in config.json, and prints the path to the first private call. Without it, --yes keeps what config.json records'),
+      flag2("--own-address", "<address>", `optional, in your own terminal only (the same as the answer to setup's address question): your own wallet address (Phantom, Solflare, an exchange's deposit address), for sending money back to yourself: the MCP sends to it without asking each time (as mcp --unshield-to), also in an agent app that cannot show a question. Not this wallet's own address. Refused in a script, a pipe, or an agent's tool (no terminal), also with --yes: an agent must never approve an address. A rerun adds it to the ones config.json records (at most ${MAX_OWN_ADDRESSES})`),
       flag2("--passphrase-file", "<file>", "your own passphrase file (8 or more characters); default: setup writes a new random passphrase to <home>/passphrase.txt, readable by you alone. Needed for a wallet that exists already"),
       flag2("--facilitator", "<https origin>", `the facilitator whose release, pool, and proof tools setup uses; default ${GUIDE.facilitator}`, { check: "origin" }),
       flag2("--add-to", "<claude-code|claude-desktop|cursor>", `also add the server (npx -y --no-audit --no-fund ${NPX_AT_VERSION} mcp: the host starts this npm version; a wallet not installed from npm writes shinjuku-shield without a version) to this agent host's config; repeat it for more. Without it, setup prints the configs`, { repeat: true }),
@@ -163574,7 +163721,7 @@ var COMMANDS = [
       `${CLI2} setup --yes --private-inference`
     ],
     notes: [
-      `npx -y --no-audit --no-fund ${COMMAND_AT_VERSION} setup runs the same command. Without --yes it asks in the terminal: the caps (Enter keeps the default), Tor, and private inference.`,
+      `npx -y --no-audit --no-fund ${COMMAND_AT_VERSION} setup runs the same command. Without --yes a first setup asks in the terminal: Tor, private inference, and your own wallet address (Enter skips it). A rerun in a terminal asks only for your own wallet address: on a complete setup an address given there is saved and nothing else runs; Enter checks every piece again.`,
       `When Tor is recorded or asked for (a yes, --tor, --prefer-tor, or --private-inference), setup itself runs behind Tor: the release, the proof-tool downloads, and the RPC requests go over Tor, so the facilitator never sees this machine's IP address make the wallet. config.json then records Tor for mcp ("tor": true), so the MCP runs behind Tor too. Tor must run first (torrc: HTTPTunnelPort 127.0.0.1:9080); --no-tor runs it without Tor.`,
       `Private inference (a yes, or --private-inference): ${PRIVATE_INFERENCE_WHY} Setup records Tor, then prints five steps with real commands: add-funds (it shields the USDC), the first call (echo "Say hello" | ${CLI2} infer -, about 0.0011 USDC; no flags: config.json gives the wallet, the caps, and Tor), infer start for an agent app (the local AI server in the background: base_url and api key), and an MCP restart for inference_chat (and inference_server, which starts the same local AI server from the agent). In a terminal it then offers to run add-funds; it never pays an inference call.`,
       "The wallet home is SHIELDED_WALLET_HOME, default ~/.carbon-shielded-wallet (every command of this CLI uses it). setup writes there: config.json, passphrase.txt (mode 0600; on Windows an access list of your account alone), the wallet (<pool>/wallet.json, made by init with the production pool, program, network, and USDC), a recovery file recovery-<time>.txt, and proof-tools/<dir>/.",
@@ -164216,7 +164363,7 @@ function overviewText() {
     "",
     "Exit codes: 0 done; 1 the command ran and failed (one-line reason); 2 the command line is wrong (shows a working example).",
     `Start here: ${oneTimeCommandLine("setup", npm)} (or ${CLI2} setup), then the agent host runs npx -y --no-audit --no-fund ${npxPackageWord(npm)} mcp, and your agent adds funds with wallet_add_funds (from 0.01 USDC).`,
-    `Manual path, without setup: ${CLI2} help init, then ${CLI2} help add-funds (whole USDC only).`,
+    `Manual path, without setup: ${CLI2} help init, then ${CLI2} help add-funds (from 0.01 USDC).`,
     `Lost the wallet file? ${CLI2} help restore (from the init recovery file)`,
     ""
   ].join("\n");
@@ -164329,7 +164476,7 @@ function checkValue(spec, value) {
   if (spec.check === "pubkey") {
     let canonical5 = false;
     try {
-      canonical5 = new import_web3138.PublicKey(value).toBase58() === value;
+      canonical5 = new import_web3139.PublicKey(value).toBase58() === value;
     } catch {
       canonical5 = false;
     }
@@ -164492,7 +164639,7 @@ var UNSHIELD_MADE_ID = /* @__PURE__ */ Symbol("unshield id made here");
 var unshieldRefusal = (reason, text3) => new PublicFailure(`p03_unshield_${reason}: ${text3}`);
 function walletOwnAddress(store) {
   try {
-    return import_web3138.Keypair.fromSecretKey(Uint8Array.from(store.state.solanaSecretKey), { skipValidation: true }).publicKey;
+    return import_web3139.Keypair.fromSecretKey(Uint8Array.from(store.state.solanaSecretKey), { skipValidation: true }).publicKey;
   } catch {
     return void 0;
   }
@@ -164518,13 +164665,13 @@ async function runUnshieldCommand(args, values, deps, io) {
   };
   let store;
   const openStore = () => store ??= (deps.openWalletStore ?? openWalletStore)(resolve39(values.get("--wallet")), payerPassphrase(values, deps));
-  const owner = values.has("--recipient-owner") ? new import_web3138.PublicKey(values.get("--recipient-owner")) : new import_web3138.PublicKey(values.get("--to"));
+  const owner = values.has("--recipient-owner") ? new import_web3139.PublicKey(values.get("--recipient-owner")) : new import_web3139.PublicKey(values.get("--to"));
   if (!values.has("--recipient-owner")) {
     const wallet = openStore();
     if (walletOwnAddress(wallet)?.equals(owner)) {
       throw unshieldRefusal("recipient_owner_is_deposit_key", `--to is this wallet's own public address (its own key): an exit there would show on chain that the money is yours, so this private wallet does not send there; nothing was sent. Send to another address (best: one that never sent USDC into this wallet), like ${UNSHIELD_EXAMPLE}`);
     }
-    const mint = new import_web3138.PublicKey(wallet.state.asset);
+    const mint = new import_web3139.PublicKey(wallet.state.asset);
     const check = deps.unshieldRecipientHoldsUsdc ?? ((input) => recipientHoldsUsdc({ ...input, connection: connectRelay(spendRpcUrl(values, deps), "finalized") }));
     let holds;
     try {
@@ -165137,19 +165284,22 @@ var RELAYED_DEPOSIT_UNIT = Object.freeze({
   CDtxyRjCUs2pu7t3U9TwtpnZwyxBFZ4dKXvb4RCmXHXv: "1000000"
 });
 async function runDeposit(args, values, deps) {
-  const unit = values.has("--relay") && !values.has("--pool-denomination") ? RELAYED_DEPOSIT_UNIT[values.get("--pool")] : void 0;
+  const poolUnit = RELAYED_DEPOSIT_UNIT[values.get("--pool")];
+  const amount = String(values.get("--amount") ?? "");
+  const offUnit = poolUnit !== void 0 && /^[0-9]{1,20}$/.test(amount) && BigInt(amount) % BigInt(poolUnit) !== 0n;
+  const unit = values.has("--relay") && !values.has("--pool-denomination") && !offUnit ? poolUnit : void 0;
   try {
     await deps.researchWalletMain(["deposit", ...args, ...unit ? ["--pool-denomination", unit] : []]);
   } catch (error) {
     if (error?.message !== "p03_deposit_relay_fund_one_time_address") throw error;
     let address5;
     try {
-      address5 = new import_web3138.PublicKey(error.oneTimeAddress).toBase58();
+      address5 = new import_web3139.PublicKey(error.oneTimeAddress).toBase58();
     } catch {
       throw error;
     }
     const decimals = Number(error.decimals ?? 6);
-    const asset = error.asset === GUIDE.mint ? "USDC" : `tokens of mint ${new import_web3138.PublicKey(error.asset).toBase58()}`;
+    const asset = error.asset === GUIDE.mint ? "USDC" : `tokens of mint ${new import_web3139.PublicKey(error.asset).toBase58()}`;
     const held = BigInt(error.heldAtomic);
     const unitAtomic = BigInt(values.get("--pool-denomination") ?? unit ?? "1");
     const usable = held / unitAtomic * unitAtomic;
@@ -165321,6 +165471,12 @@ async function runBalance(args, values, deps, io) {
     source: values.has("--refresh") ? "refresh" : "local",
     now: deps.now()
   });
+  const refreshArgs = values.has("--refresh") || report.status === "current" || report.status === "empty" ? void 0 : homeRefreshArgs(store, deps);
+  if (refreshArgs) {
+    io.err("reading your private balance from the chain\n");
+    const shownFlags = ["--json", "--verbose"].filter((name) => values.has(name));
+    if (await runShinjukuWallet(["balance", ...refreshArgs, ...shownFlags], deps) === 0) return;
+  }
   const shown = earlierDeposits.map((outcome) => ({
     pool: outcome.pool,
     state: outcome.state,
@@ -165351,6 +165507,16 @@ async function runBalance(args, values, deps, io) {
   io.out(`${JSON.stringify({ ...report, ...shown.length ? { earlierDeposits: shown } : {}, ...unfinished2.length ? { unfinishedUnshields: unfinished2 } : {} }, null, 2)}
 `);
 }
+function homeRefreshArgs(store, deps) {
+  let config;
+  try {
+    config = readSetupConfig(setupHome(deps.env));
+  } catch {
+    return void 0;
+  }
+  if (config?.pool !== store.state.pool || !config.program || !config.proofTools || !config.memoService) return void 0;
+  return ["--pool", config.pool, "--refresh", "--program", config.program, "--proof-tools", config.proofTools, "--service", config.memoService, "--fresh"];
+}
 async function adoptOneTimeForBalance({ store, values, deps, io }) {
   try {
     const home = setupHome(deps.env);