shinjuku-shielded 0.3.159 → 0.3.160

package/README.md

@@ -6,19 +6,19 @@ answers privately, in a terminal chat or for your agent app. Its `mcp`
 command runs a local MCP server (stdio) for your agent. Your keys never
 leave your machine.
 
-This is version 0.3.159. The npm packages `shinjuku-shield` and
+This is version 0.3.160. The npm packages `shinjuku-shield` and
 `shinjuku-shielded` hold the same files. The command is `shinjuku`.
 
 ## Set up
 
 ```sh
-npm install -g shinjuku@0.3.159
+npm install -g shinjuku@0.3.160
 shinjuku setup
 ```
 
 Type the two lines as they are. `npx install shinjuku` does not work: npx
 reads `install` as the name of another npm package. To set up without
-installing, type `npx shinjuku@0.3.159 setup`.
+installing, type `npx shinjuku@0.3.160 setup`.
 
 Setup makes the wallet on this machine, a private passphrase file, and the
 checked proof tools (about 191 MB), and writes `config.json`. It also writes
@@ -36,13 +36,13 @@ Every wallet command works after `shinjuku`, for example `shinjuku balance`,
 Claude Code:
 
 ```sh
-claude mcp add --scope user shinjuku -- npx -y --no-audit --no-fund shinjuku-shield@0.3.159 mcp
+claude mcp add --scope user shinjuku -- npx -y --no-audit --no-fund shinjuku-shield@0.3.160 mcp
 ```
 
 Claude Desktop (`claude_desktop_config.json`) or Cursor (`~/.cursor/mcp.json`):
 
 ```json
-{ "mcpServers": { "shinjuku": { "command": "npx", "args": ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.159", "mcp"] } } }
+{ "mcpServers": { "shinjuku": { "command": "npx", "args": ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.160", "mcp"] } } }
 ```
 
 On native Windows, if the host cannot find `npx`, use `"command": "cmd"` and
@@ -55,7 +55,7 @@ Codex (the Codex app and Codex CLI read the same file, `~/.codex/config.toml`):
 ```toml
 [mcp_servers.shinjuku]
 command = "npx"
-args = ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.159", "mcp"]
+args = ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.160", "mcp"]
 startup_timeout_sec = 120
 tool_timeout_sec = 300
 ```

package/manifest.json

@@ -1,9 +1,9 @@
 {
   "schema": "carbon-shielded-wallet/bundle-manifest/v1",
   "file": "shinjuku-wallet.mjs",
-  "sha256": "cefda627cdfe4d2186085a15dd230f822175f98c4f3a10c4b5f1e1327114d627",
-  "bytes": 9244374,
-  "sourceCommit": "3e2a43e33968834e73c6ca8d2a2e1ba669ce04b8",
+  "sha256": "eb6f9ba6c43c52189f2d1f9124f1e23b23e471a168ffc0fe008c818c35f6b981",
+  "bytes": 9251599,
+  "sourceCommit": "58e77ed499568c5b3ec71e010ed2b0a1f75e20f0",
   "sourceDirty": false,
   "installRecordMatchesLockfile": true,
   "releaseRule": "valid only when two fresh npm ci --ignore-scripts builds on different OSes give the same sha256; installRecordMatchesLockfile true means every entry npm installed equals its package-lock.json entry and every entry not marked optional, devOptional included, is installed: an optional entry (a package for another platform) may be absent",
@@ -1038,5 +1038,5 @@
       "version": "1.8.0"
     }
   ],
-  "publishedAt": "2026-11-04T03:27:04.696Z"
+  "publishedAt": "2026-11-04T04:35:54.717Z"
 }

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "shinjuku-shielded",
-  "version": "0.3.159",
+  "version": "0.3.160",
   "mcpName": "io.github.ShinjukuStaition/shinjuku-mcp",
   "description": "Shinjuku Shielded, the private x402 facilitator on Solana: the self-custody wallet CLI and its MCP server. Shield, pay, and unshield USDC from any MCP agent, under caps you set.",
-  "shinjukuRelease": "cefda627",
-  "shinjukuSha256": "cefda627cdfe4d2186085a15dd230f822175f98c4f3a10c4b5f1e1327114d627",
+  "shinjukuRelease": "eb6f9ba6",
+  "shinjukuSha256": "eb6f9ba6c43c52189f2d1f9124f1e23b23e471a168ffc0fe008c818c35f6b981",
   "license": "SEE LICENSE IN LICENSE.txt",
   "author": "Shinjuku Shielded",
   "homepage": "https://github.com/ShinjukuStaition/shinjuku-shield#readme",

package/shinjuku-wallet.mjs

@@ -61,7 +61,7 @@ var __toCommonJS = (mod7) => __copyProps(__defProp({}, "__esModule", { value: tr
 import { readFileSync as realReadFileSync } from "node:fs";
 import { relative, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
-import { accessSync, appendFileSync, chmodSync, closeSync, constants, copyFileSync, createReadStream, createWriteStream, existsSync, fchmodSync, fstatSync, fsyncSync, linkSync, lstatSync, mkdirSync, mkdtempSync, openSync, readFile, readSync, readdirSync, readlinkSync, realpathSync, renameSync, rmSync, rmdirSync, statSync, statfsSync, truncateSync, unlinkSync, writeFileSync, writeSync } from "node:fs";
+import { accessSync, appendFileSync, chmodSync, closeSync, constants, copyFileSync, createReadStream, createWriteStream, existsSync, fchmodSync, fstatSync, fsyncSync, linkSync, lstatSync, mkdirSync, mkdtempSync, openSync, readFile, readSync, readdirSync, realpathSync, renameSync, rmSync, rmdirSync, statSync, statfsSync, truncateSync, unlinkSync, writeFileSync, writeSync } from "node:fs";
 function readFileSync(path, options) {
   const target = typeof path === "string" ? path : path instanceof URL ? fileURLToPath(path) : void 0;
   if (target !== void 0) {
@@ -125660,6 +125660,8 @@ function clearBackupWithCode(home, code2) {
   return true;
 }
 function backupPlaces({ platform = process.platform, env = process.env } = {}) {
+  const roots = cloudRoots({ platform, env, home: homedir2() });
+  const notSynced = (list) => list.filter((place) => !cloudPlace(place.path, { platform, env, roots: () => roots }));
   const places = [];
   if (platform === "win32") {
     try {
@@ -125681,12 +125683,12 @@ function backupPlaces({ platform = process.platform, env = process.env } = {}) {
     } catch {
     }
     const profile = env.USERPROFILE ?? homedir2();
-    for (const [label, path] of [["Desktop", join29(profile, "Desktop")], ["Desktop", join29(profile, "OneDrive", "Desktop")], ["Documents", join29(profile, "Documents")]]) {
+    for (const [label, path] of [["Desktop", join29(profile, "Desktop")], ["Documents", join29(profile, "Documents")]]) {
       if (isFolder(path) && !places.some((place) => place.path.toLowerCase() === path.toLowerCase())) {
         places.push({ label: `${label} (${path}; on this computer: it does not help if this computer breaks)`, path, removable: false });
       }
     }
-    return places;
+    return notSynced(places);
   }
   let user = "";
   try {
@@ -125706,7 +125708,66 @@ function backupPlaces({ platform = process.platform, env = process.env } = {}) {
   for (const path of [join29(homedir2(), "Desktop"), homedir2()]) {
     if (isFolder(path)) places.push({ label: `${path} (on this computer: it does not help if this computer breaks)`, path, removable: false });
   }
-  return places;
+  return notSynced(places);
+}
+function cloudPlace(place, { platform = process.platform, env = process.env, home = homedir2(), roots } = {}) {
+  const text3 = String(place ?? "").trim();
+  if (!text3) return void 0;
+  const fold = platform === "win32" || platform === "darwin";
+  const sep5 = platform === "win32" ? "\\" : "/";
+  const norm = (path) => {
+    const full = (platform === "win32" ? resolve25(localForm(path, platform)) : posix.resolve(path)).replace(/[\\/]+$/, "");
+    return fold ? full.toLowerCase() : full;
+  };
+  const at = norm(text3);
+  for (const root of (roots ?? (() => cloudRoots({ platform, env, home })))()) {
+    const base = norm(root.path);
+    if (base && (at === base || at.startsWith(`${base}${sep5}`))) return root.service;
+  }
+  for (const part of text3.split(/[\\/]+/).map((name) => name.trim().toLowerCase())) {
+    if (part === "onedrive" || part.startsWith("onedrive - ") || part.startsWith("onedrive-")) return "OneDrive";
+    if (part === "dropbox" || part.startsWith("dropbox (") || part.startsWith("dropbox-")) return "Dropbox";
+    if (["my drive", "shared drives", "google drive"].includes(part) || part.startsWith("googledrive")) return "Google Drive";
+    if (["iclouddrive", "icloud drive", "icloud photos", "mobile documents"].includes(part)) return "iCloud";
+  }
+  return void 0;
+}
+function cloudRoots({ platform = process.platform, env = process.env, home = homedir2() } = {}) {
+  const roots = [];
+  const add2 = (path, service) => {
+    if (typeof path === "string" && path.trim()) roots.push({ path: path.trim(), service });
+  };
+  const dropbox = (file) => {
+    let info;
+    try {
+      info = JSON.parse(readFileSync(file, "utf8"));
+    } catch {
+      return;
+    }
+    for (const account of Object.values(info ?? {})) add2(account?.path, "Dropbox");
+  };
+  if (platform === "win32") {
+    for (const name of ["OneDrive", "OneDriveConsumer", "OneDriveCommercial"]) add2(env[name], "OneDrive");
+    add2(join29(env.USERPROFILE ?? home, "OneDrive"), "OneDrive");
+    try {
+      const result = spawnSync3(
+        "reg.exe",
+        ["query", "HKCU\\Software\\Microsoft\\OneDrive\\Accounts", "/s", "/v", "UserFolder"],
+        { windowsHide: true, encoding: "utf8", timeout: 1e4 }
+      );
+      for (const match of String(result.stdout ?? "").matchAll(/UserFolder\s+REG_\w+\s+(.+)/g)) add2(match[1], "OneDrive");
+    } catch {
+    }
+    if (env.APPDATA) dropbox(join29(env.APPDATA, "Dropbox", "info.json"));
+    if (env.LOCALAPPDATA) dropbox(join29(env.LOCALAPPDATA, "Dropbox", "info.json"));
+    return roots;
+  }
+  dropbox(posix.join(home, ".dropbox", "info.json"));
+  if (platform === "darwin") {
+    add2(posix.join(home, "Library", "Mobile Documents"), "iCloud");
+    add2(posix.join(home, "Library", "CloudStorage"), "a cloud service");
+  }
+  return roots;
 }
 async function saveBackup(home, folder, {
   removable,
@@ -125714,7 +125775,8 @@ async function saveBackup(home, folder, {
   platform = process.platform,
   restrict = restrictFolderToOwner,
   driveType = windowsDriveType,
-  mounts = posixMounts
+  mounts = posixMounts,
+  env = process.env
 } = {}) {
   const typed = String(folder ?? "").trim().replace(/^"(.*)"$/, "$1");
   const types = /* @__PURE__ */ new Map();
@@ -125726,85 +125788,173 @@ async function saveBackup(home, folder, {
   const noFolder = (at) => backupFailed(`there is no folder ${at}. Plug in the drive or type another folder`);
   const refuse13 = (found, at) => {
     if (found === "missing") throw noFolder(at);
+    if (found === "link") throw backupFailed(LINK_WORDS(at));
     if (found) throw backupFailed(found === "unknown" ? UNKNOWN_DRIVE_WORDS(at) : NETWORK_PLACE_WORDS(at));
   };
+  const roots = cloudRoots({ platform, env, home: homedir2() });
+  const refuseCloud = (at) => {
+    const service = cloudPlace(at, { platform, env, roots: () => roots });
+    if (service) throw backupFailed(CLOUD_WORDS(at, service));
+  };
   refuse13(networkPlace(typed, net4), typed);
   const place = localForm(resolve25(typed), platform);
   refuse13(networkPlace(place, net4), place);
-  refuse13(linkToNetwork(place, net4), place);
-  if (!isAbsolute7(place) || !isFolder(place)) throw noFolder(place);
-  const real = realLocal(place, net4, refuse13);
-  const files = backupFiles(home);
-  const date = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
-  let target = join29(real, `shinjuku-backup-${date}`);
-  for (let n = 2; existsSync(target); n += 1) target = join29(real, `shinjuku-backup-${date}-${n}`);
-  try {
-    mkdirSync(target, { mode: 448 });
+  refuseCloud(place);
+  const onWay = linkOnWay(place, platform);
+  const fullPath = isAbsolute7(typed) && (platform !== "win32" || /^(?:[\\/]{2}[?.][\\/])?[A-Za-z]:[\\/]/.test(typed));
+  if (onWay === "missing" && !fullPath) throw noFolder(place);
+  const trail = { files: [], dirs: [] };
+  let made;
+  try {
+    made = onWay === "missing" ? makeMissingFolder(place, net4, refuse13, noFolder, trail) : refuse13(onWay, place);
+    return await saveInFolder();
   } catch (error) {
-    throw backupFailed(`the wallet could not make a folder in ${place} (${error?.code === "EACCES" || error?.code === "EPERM" ? "no permission to write there" : error?.code === "ENOSPC" ? "the drive is full" : "it cannot write there"}). Pick another place`);
+    removeTrail(trail);
+    throw error;
   }
-  const stillHere = (path) => {
-    let now;
+  async function saveInFolder() {
+    if (!isAbsolute7(place) || !isFolder(place)) throw noFolder(place);
+    const real = realLocal(place, net4, refuse13);
+    refuseCloud(real);
+    if (made && !samePath(real, made.real, platform)) throw backupFailed(MOVED_WORDS(place));
+    const files = backupFiles(home);
+    const date = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+    let target = join29(real, `shinjuku-backup-${date}`);
+    for (let n = 2; existsSync(target); n += 1) target = join29(real, `shinjuku-backup-${date}-${n}`);
+    try {
+      mkdirSync(target, { mode: 448 });
+      trail.dirs.push(identityOf(target));
+    } catch (error) {
+      throw backupFailed(`the wallet could not make a folder in ${place} (${error?.code === "EACCES" || error?.code === "EPERM" ? "no permission to write there" : error?.code === "ENOSPC" ? "the drive is full" : "it cannot write there"}). Pick another place`);
+    }
+    const stillHere = (path) => {
+      let now;
+      try {
+        now = localForm(realpathSync.native(path), platform);
+      } catch {
+        now = void 0;
+      }
+      if (!now || !samePath(now, path, platform)) throw backupFailed(MOVED_WORDS(place));
+      refuse13(networkPlace(now, net4), now);
+      refuseCloud(now);
+    };
+    stillHere(target);
+    let access;
     try {
-      now = localForm(realpathSync.native(path), platform);
+      access = restrict(target, platform);
     } catch {
-      now = void 0;
+      access = "open";
+    }
+    if (access === "foreign") {
+      throw backupFailed(`this folder can be opened by other accounts (${place}); pick another place`);
+    }
+    const ownerOnly = access === "owner";
+    const saved = [];
+    const names = /* @__PURE__ */ new Set();
+    for (const file of files) {
+      let name = basename6(file);
+      for (let n = 2; names.has(name.toLowerCase()); n += 1) name = `${basename6(file, extname(file))}-${n}${extname(file)}`;
+      names.add(name.toLowerCase());
+      const copy = join29(target, name);
+      stillHere(target);
+      try {
+        copyFileSync(file, copy, constants.COPYFILE_EXCL);
+        trail.files.push(identityOf(copy));
+        if (platform !== "win32") chmodSync(copy, 384);
+      } catch (error) {
+        throw backupFailed(`the copy to ${target} failed (${error?.code === "ENOSPC" ? "the drive is full" : "the drive did not take the file"}). Pick another place`);
+      }
+      stillHere(copy);
+      saved.push({ name, source: file, sha256: sha256Of(file) });
     }
-    if (!now || !samePath(now, path, platform)) throw backupFailed(MOVED_WORDS(place));
-    refuse13(networkPlace(now, net4), now);
-  };
-  stillHere(target);
-  let access;
-  try {
-    access = restrict(target, platform);
-  } catch {
-    access = "open";
+    for (const entry of saved) {
+      if (sha256Of(join29(target, entry.name)) !== entry.sha256) throw backupFailed(`the copy in ${target} does not match the original. Pick another place`);
+    }
+    const code2 = cleared ? void 0 : backupCode();
+    writeRecord(home, { savedAt: (/* @__PURE__ */ new Date()).toISOString(), folder: target, cleared, ...code2 ? { codeSha256: code2.sha256 } : {} });
+    const warning = removable === true ? "Anyone who gets this USB stick can spend your money: keep it somewhere safe." : !ownerOnly ? "Other people who use this computer or drive may be able to open it: keep it somewhere only you can reach." : void 0;
+    return { folder: target, files: saved.map(({ name, sha256: sha25610 }) => ({ name, sha256: sha25610 })), ownerOnly, ...warning ? { warning } : {}, ...code2 ? { code: code2.code } : {} };
   }
-  if (access === "foreign") {
+}
+function localForm(place, platform) {
+  if (platform !== "win32") return place;
+  const local = /^[\\/]{2}[?.][\\/]([A-Za-z]:(?:[\\/].*)?)$/.exec(place)?.[1];
+  return local ? local.length === 2 ? `${local}\\` : local : place;
+}
+function makeMissingFolder(place, net4, refuse13, noFolder, trail) {
+  if (!isAbsolute7(place)) throw noFolder(place);
+  const names = [];
+  let parent = place;
+  while (!existsSync(parent)) {
+    const up = dirname28(parent);
+    if (up === parent) throw noFolder(place);
+    names.unshift(basename6(parent));
+    parent = up;
+  }
+  if (!names.length || !isFolder(parent)) throw noFolder(place);
+  if (net4.platform === "win32") {
+    const bad2 = names.find((name) => WINDOWS_RESERVED.test(name.replace(/[. ]+$/, "")) || /[<>:"|?*\u0000-\u001f]/.test(name) || /[. ]$/.test(name));
+    if (bad2) throw backupFailed(`"${bad2}" cannot be a folder name on Windows. Type another folder`);
+  }
+  refuse13(linkOnWay(parent, net4.platform), parent);
+  let at = realLocal(parent, net4, refuse13);
+  const realFolderAt = (path) => {
+    let stat2;
     try {
-      rmdirSync(target);
+      stat2 = lstatSync(path);
     } catch {
+      return false;
     }
-    throw backupFailed(`this folder can be opened by other accounts (${place}); pick another place`);
-  }
-  const ownerOnly = access === "owner";
-  const saved = [];
-  const names = /* @__PURE__ */ new Set();
-  for (const file of files) {
-    let name = basename6(file);
-    for (let n = 2; names.has(name.toLowerCase()); n += 1) name = `${basename6(file, extname(file))}-${n}${extname(file)}`;
-    names.add(name.toLowerCase());
-    const copy = join29(target, name);
-    stillHere(target);
+    if (stat2.isSymbolicLink() || !stat2.isDirectory()) return false;
+    let now;
     try {
-      copyFileSync(file, copy, constants.COPYFILE_EXCL);
-      if (platform !== "win32") chmodSync(copy, 384);
-    } catch (error) {
-      throw backupFailed(`the copy to ${target} failed (${error?.code === "ENOSPC" ? "the drive is full" : "the drive did not take the file"}). Pick another place`);
+      now = localForm(realpathSync.native(path), net4.platform);
+    } catch {
+      return false;
     }
+    return samePath(now, path, net4.platform);
+  };
+  for (const name of names) {
+    if (!realFolderAt(at)) throw backupFailed(MOVED_WORDS(place));
+    const next = join29(at, name);
     try {
-      stillHere(copy);
+      mkdirSync(next, { mode: 448 });
     } catch (error) {
-      try {
-        rmSync(copy, { force: true });
-      } catch {
-      }
-      throw error;
+      throw backupFailed(`the wallet could not make the folder ${place} (${error?.code === "EACCES" || error?.code === "EPERM" ? "no permission to write there" : error?.code === "ENOSPC" ? "the drive is full" : error?.code === "EEXIST" ? "another program made a part of it meanwhile" : "it cannot write there"}). Pick another place`);
     }
-    saved.push({ name, source: file, sha256: sha256Of(file) });
-  }
-  for (const entry of saved) {
-    if (sha256Of(join29(target, entry.name)) !== entry.sha256) throw backupFailed(`the copy in ${target} does not match the original. Pick another place`);
+    trail.dirs.push(identityOf(next));
+    if (!realFolderAt(next)) throw backupFailed(MOVED_WORDS(place));
+    refuse13(networkPlace(next, net4), next);
+    at = next;
   }
-  const code2 = cleared ? void 0 : backupCode();
-  writeRecord(home, { savedAt: (/* @__PURE__ */ new Date()).toISOString(), folder: target, cleared, ...code2 ? { codeSha256: code2.sha256 } : {} });
-  const warning = removable === true ? "Anyone who gets this USB stick can spend your money: keep it somewhere safe." : !ownerOnly ? "Other people who use this computer or drive may be able to open it: keep it somewhere only you can reach." : void 0;
-  return { folder: target, files: saved.map(({ name, sha256: sha25610 }) => ({ name, sha256: sha25610 })), ownerOnly, ...warning ? { warning } : {}, ...code2 ? { code: code2.code } : {} };
+  return { real: at };
 }
-function localForm(place, platform) {
-  if (platform !== "win32") return place;
-  const local = /^[\\/]{2}[?.][\\/]([A-Za-z]:(?:[\\/].*)?)$/.exec(place)?.[1];
-  return local ? local.length === 2 ? `${local}\\` : local : place;
+function identityOf(path) {
+  const stat2 = statSync(path, { bigint: true });
+  return { path, dev: stat2.dev, ino: stat2.ino };
+}
+function removeTrail(trail) {
+  const same2 = (entry, kind) => {
+    let stat2;
+    try {
+      stat2 = lstatSync(entry.path, { bigint: true });
+    } catch {
+      return false;
+    }
+    return !stat2.isSymbolicLink() && (kind === "file" ? stat2.isFile() : stat2.isDirectory()) && stat2.dev === entry.dev && stat2.ino === entry.ino;
+  };
+  for (const entry of [...trail.files].reverse()) {
+    if (same2(entry, "file")) try {
+      rmSync(entry.path);
+    } catch {
+    }
+  }
+  for (const entry of [...trail.dirs].reverse()) {
+    if (same2(entry, "dir")) try {
+      rmdirSync(entry.path);
+    } catch {
+    }
+  }
 }
 function realLocal(path, net4, refuse13) {
   let real;
@@ -125838,33 +125988,32 @@ function networkPlace(place, { platform = process.platform, driveType = windowsD
   const local = LOCAL_FS.has(mount.type) || mount.type === "drvfs" || mount.type === "9p" && /(^|,)aname=drvfs(,|$)/.test(mount.options ?? "");
   return local ? false : "unknown";
 }
-function linkToNetwork(place, options, hops = 0) {
-  if (hops > 20) return "unknown";
-  const local = localForm(place, options.platform);
-  if (options.platform === "win32" && !/^[A-Za-z]:/.test(local)) return "unknown";
+function linkOnWay(place, platform) {
+  const local = localForm(place, platform);
+  if (platform === "win32" && !/^[A-Za-z]:/.test(local)) return "unknown";
   const parts = local.split(/[\\/]+/).filter((part, index) => index === 0 || part !== "");
   for (let end2 = 2; end2 <= parts.length; end2 += 1) {
-    const prefix = parts.slice(0, end2).join(options.platform === "win32" ? "\\" : "/") || "/";
+    const prefix = parts.slice(0, end2).join(platform === "win32" ? "\\" : "/") || "/";
     let stat2;
     try {
-      stat2 = lstatSync(options.platform === "win32" && /^[A-Za-z]:$/.test(prefix) ? `${prefix}\\` : prefix);
+      stat2 = lstatSync(platform === "win32" && /^[A-Za-z]:$/.test(prefix) ? `${prefix}\\` : prefix);
     } catch (error) {
       return error?.code === "ENOENT" || error?.code === "ENOTDIR" ? "missing" : "unknown";
     }
-    if (!stat2.isSymbolicLink()) continue;
-    let target;
-    try {
-      target = readlinkSync(prefix);
-    } catch {
-      return "unknown";
-    }
-    const next = resolve25(dirname28(prefix), target, ...parts.slice(end2));
-    const found = networkPlace(target, options) || networkPlace(next, options);
-    if (found) return found;
-    return linkToNetwork(next, options, hops + 1);
+    if (stat2.isSymbolicLink() && !systemLink(prefix, stat2, platform)) return "link";
   }
   return false;
 }
+function systemLink(path, stat2, platform) {
+  if (platform === "win32" || stat2.uid !== 0) return false;
+  let holder;
+  try {
+    holder = lstatSync(posix.dirname(path));
+  } catch {
+    return false;
+  }
+  return holder.isDirectory() && !holder.isSymbolicLink() && holder.uid === 0 && (holder.mode & 18) === 0;
+}
 function windowsDriveType(letter) {
   try {
     const result = spawnSync3(
@@ -125938,7 +126087,7 @@ function recordBackupSkip(home) {
   if (backupRecord(home)?.cleared) return;
   writeRecord(home, { skippedAt: (/* @__PURE__ */ new Date()).toISOString() });
 }
-var backupRecordFile, sha256Of, isFolder, backupFailed, canBackUp, NETWORK_PLACE_WORDS, MOVED_WORDS, samePath, UNKNOWN_DRIVE_WORDS, NETWORK_FS, LOCAL_FS, SYSTEM_SID, ADMINISTRATORS_SID, backupNeeded;
+var backupRecordFile, sha256Of, isFolder, backupFailed, canBackUp, CLOUD_WORDS, NETWORK_PLACE_WORDS, MOVED_WORDS, WINDOWS_RESERVED, samePath, UNKNOWN_DRIVE_WORDS, NETWORK_FS, LOCAL_FS, LINK_WORDS, SYSTEM_SID, ADMINISTRATORS_SID, backupNeeded;
 var init_backup = __esm({
   "wallet/src/setup/backup.mjs"() {
     "use strict";
@@ -125963,8 +126112,10 @@ var init_backup = __esm({
       }
       return typeof config?.recoveryFile === "string" && existsSync(config.recoveryFile);
     };
+    CLOUD_WORDS = (place, service) => `${place} is synced to ${service === "a cloud service" ? "a cloud service" : `${service}'s cloud`}, so the backup would be uploaded there. Pick a USB drive or a folder that is not synced`;
     NETWORK_PLACE_WORDS = (place) => `${place} is on a network share or a network drive. A backup there can be read by the people who run that share, and the computer reaches it outside Tor, so the wallet does not save it there. Pick a USB drive or a folder on this computer`;
     MOVED_WORDS = (place) => `the folder ${place} changed while the wallet saved the backup (a part of its path now leads somewhere else), so the wallet stopped and removed what it wrote. Pick a USB drive or a folder on this computer, and try again`;
+    WINDOWS_RESERVED = /^(con|prn|aux|nul|conin\$|conout\$|com[0-9\u00b9\u00b2\u00b3]|lpt[0-9\u00b9\u00b2\u00b3])(\..*)?$/i;
     samePath = (a, b, platform) => platform === "win32" ? resolve25(a).toLowerCase() === resolve25(b).toLowerCase() : resolve25(a) === resolve25(b);
     UNKNOWN_DRIVE_WORDS = (place) => `the wallet could not tell whether the drive of ${place} is on this computer or on a network, so it does not save the backup there. Pick a USB drive or a folder on this computer, or try again`;
     NETWORK_FS = /^(nfs4?|cifs|smb[23]?|smbfs|afpfs|webdav|davfs|ncpfs|afs|ceph|glusterfs|lustre|fuse\.(sshfs|rclone|s3fs|davfs2?|gvfsd-fuse|smbnetfs))$/;
@@ -125990,6 +126141,7 @@ var init_backup = __esm({
       "tmpfs",
       "ramfs"
     ]);
+    LINK_WORDS = (place) => `a part of ${place} is a link to another place (a junction or a symbolic link), so the wallet does not save the backup there. Pick a USB drive or a normal folder`;
     SYSTEM_SID = "S-1-5-18";
     ADMINISTRATORS_SID = "S-1-5-32-544";
     backupNeeded = (home) => canBackUp(home) && backupRecord(home)?.cleared !== true && !backupSkipped(home);
@@ -126064,14 +126216,15 @@ function createBackup({ home, client, elicitTimeoutMs, unshown = () => false, lo
       });
     }
     const code2 = done.saved.code;
+    const say3 = code2 ? `Your backup code is ${code2}: say it back to me to add money. This backup is on this computer, so it does not help if this computer breaks; copy it to a USB stick too. ${savedLine(done.saved, done.removable)}` : savedLine(done.saved, done.removable);
     return json2({
-      say: code2 ? `Your backup code is ${code2}: say it back to me to add money with this backup. ${savedLine(done.saved, done.removable)} It does not help if this computer breaks.` : savedLine(done.saved, done.removable),
+      say: say3,
       ok: true,
       folder: done.saved.folder,
       files: done.saved.files.map((file) => file.name),
       checked: "sha256",
       ...code2 ? { waitsForCode: true } : {},
-      next: code2 ? "Tell the user the say line as it is, with the code. Only when the user says that code back, call wallet_backup with code set to it; never send the code yourself. A USB stick needs no code." : "Tell the user where the backup is. Deposits can go on now (call wallet_add_funds if the user asked for it)."
+      next: code2 ? `Say this to the user word for word, with the code (the user needs the code to add money): "${say3}" Only when the user says that code back, call wallet_backup with code set to it; never send the code yourself. A USB stick needs no code.` : "Tell the user where the backup is. Deposits can go on now (call wallet_add_funds if the user asked for it)."
     });
   }
   const boxWords = (asked) => asked.why === "failed" ? `The backup was not saved: ${asked.plain}. ` : asked.why === "declined" ? "The user closed the backup box without a choice. " : asked.why === "no_place" ? "The backup box came back with no place picked. " : asked.why === "timeout" ? "The backup box got no answer in time. " : "";
@@ -149501,7 +149654,7 @@ function successorChain(body, pool2) {
     at = next;
   }
 }
-function identityOf(facilitator, release, successors = []) {
+function identityOf2(facilitator, release, successors = []) {
   const served = { pool: release.pool, program: release.programId, network: release.network, asset: release.asset };
   if (new URL(facilitator).origin === new URL(PRODUCTION.memoService).origin) {
     const pool2 = successors.includes(served.pool) ? served.pool : PRODUCTION.pool;
@@ -149675,7 +149828,7 @@ async function runSetupSteps(options, deps, toolsSignal) {
         successions = void 0;
       }
     }
-    identity = identityOf(facilitator, release, successorChain(successions, PRODUCTION.pool));
+    identity = identityOf2(facilitator, release, successorChain(successions, PRODUCTION.pool));
     try {
       releasePools = parseReleasePools(release, facilitator);
     } catch {