shinjuku-shielded 0.3.169 → 0.3.170

package/README.md

@@ -6,19 +6,18 @@ answers privately, in a terminal chat or for your agent app. Its `mcp`
 command runs a local MCP server (stdio) for your agent. Your keys never
 leave your machine.
 
-This is version 0.3.169. The npm packages `shinjuku-shield` and
+This is version 0.3.170. The npm packages `shinjuku-shield` and
 `shinjuku-shielded` hold the same files. The command is `shinjuku`.
 
 ## Set up
 
 ```sh
-npm install -g shinjuku@0.3.169
-shinjuku setup
+npx -y shinjuku@0.3.170 setup
 ```
 
-Type the two lines as they are. `npx install shinjuku` does not work: npx
-reads `install` as the name of another npm package. To set up without
-installing, type `npx shinjuku@0.3.169 setup`.
+Setup offers to install the `shinjuku` command and, on Windows, adds npm's
+folder to your PATH when it is missing: open a new window after setup to
+type `shinjuku`.
 
 Setup makes the wallet on this machine, a private passphrase file, and the
 checked proof tools (about 191 MB), and writes `config.json`. It also writes
@@ -36,13 +35,13 @@ Every wallet command works after `shinjuku`, for example `shinjuku balance`,
 Claude Code:
 
 ```sh
-claude mcp add --scope user shinjuku -- npx -y --no-audit --no-fund shinjuku-shield@0.3.169 mcp
+claude mcp add --scope user shinjuku -- npx -y --no-audit --no-fund shinjuku-shield@0.3.170 mcp
 ```
 
 Claude Desktop (`claude_desktop_config.json`) or Cursor (`~/.cursor/mcp.json`):
 
 ```json
-{ "mcpServers": { "shinjuku": { "command": "npx", "args": ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.169", "mcp"] } } }
+{ "mcpServers": { "shinjuku": { "command": "npx", "args": ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.170", "mcp"] } } }
 ```
 
 On native Windows, if the host cannot find `npx`, use `"command": "cmd"` and
@@ -55,7 +54,7 @@ Codex (the Codex app and Codex CLI read the same file, `~/.codex/config.toml`):
 ```toml
 [mcp_servers.shinjuku]
 command = "npx"
-args = ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.169", "mcp"]
+args = ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.170", "mcp"]
 startup_timeout_sec = 120
 tool_timeout_sec = 300
 ```
@@ -98,8 +97,8 @@ which wallet paid. The wallet keeps no copy of a conversation.
 ## Needs
 
 - Node.js 22.21 or later, or Node.js 24 or later (`node --version` shows yours; a `--tor` run needs `NODE_USE_ENV_PROXY`, which Node.js 23 does not have).
-- Linux, or Windows with WSL. macOS is not supported: the provers are Linux
-  programs.
+- Windows x64 or Linux. macOS is not supported yet: setup says so before it
+  asks anything.
 - Tor, for private AI (and for `--tor`).
 
 The package has no install scripts. `node_modules/.bin` and the global npm

package/manifest.json

@@ -1,9 +1,9 @@
 {
   "schema": "carbon-shielded-wallet/bundle-manifest/v1",
   "file": "shinjuku-wallet.mjs",
-  "sha256": "9ade26e6a05c6891180751fdd695d76a8fef6376a8636b2c975b622192ac0002",
-  "bytes": 9313549,
-  "sourceCommit": "050b7443c989e9dcbd17e5a4037d6e9df3b07fb9",
+  "sha256": "1011ea8eb912d2b6cdb1c8b5696e9c9c284ac665033663e9f9d4bf553c7843b1",
+  "bytes": 9317658,
+  "sourceCommit": "dbf0f5375e0c89869b50535309c9f6dfe90c32d4",
   "sourceDirty": false,
   "installRecordMatchesLockfile": true,
   "releaseRule": "valid only when two fresh npm ci --ignore-scripts builds on different OSes give the same sha256; installRecordMatchesLockfile true means every entry npm installed equals its package-lock.json entry and every entry not marked optional, devOptional included, is installed: an optional entry (a package for another platform) may be absent",
@@ -1038,5 +1038,5 @@
       "version": "1.8.0"
     }
   ],
-  "publishedAt": "2026-11-05T05:54:41.608Z"
+  "publishedAt": "2026-11-05T08:02:09.127Z"
 }

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "shinjuku-shielded",
-  "version": "0.3.169",
+  "version": "0.3.170",
   "mcpName": "io.github.ShinjukuStaition/shinjuku-mcp",
   "description": "Shinjuku Shielded, the private x402 facilitator on Solana: the self-custody wallet CLI and its MCP server. Shield, pay, and unshield USDC from any MCP agent, under caps you set.",
-  "shinjukuRelease": "9ade26e6",
-  "shinjukuSha256": "9ade26e6a05c6891180751fdd695d76a8fef6376a8636b2c975b622192ac0002",
+  "shinjukuRelease": "1011ea8e",
+  "shinjukuSha256": "1011ea8eb912d2b6cdb1c8b5696e9c9c284ac665033663e9f9d4bf553c7843b1",
   "license": "SEE LICENSE IN LICENSE.txt",
   "author": "Shinjuku Shielded",
   "homepage": "https://github.com/ShinjukuStaition/shinjuku-shield#readme",

package/shinjuku-wallet.mjs

@@ -54100,7 +54100,7 @@ try {
 });
 
 // wallet/src/setup/config.mjs
-import { execFileSync as execFileSync2 } from "node:child_process";
+import { execFileSync as execFileSync2, spawnSync as spawnSync3 } from "node:child_process";
 import { randomBytes as randomBytes7 } from "node:crypto";
 import { homedir } from "node:os";
 import { dirname as dirname6, isAbsolute as isAbsolute2, join as join9, resolve as resolve6 } from "node:path";
@@ -54488,7 +54488,7 @@ function hostShellWord(word, platform = process.platform) {
   if (WINDOWS_SHELL_CODE.test(word)) throw new Error("setup_path_unsafe_for_shell: a word holds a character a Windows shell reads as code");
   return `"${word}"`;
 }
-function hostConfigFile(target, { platform = process.platform, env = process.env, home = homedir() } = {}) {
+function hostConfigFile(target, { platform = process.platform, env = process.env, home = homedir(), claudeRunning = claudeDataDirs } = {}) {
   const set = (name) => typeof env[name] === "string" && env[name].trim() ? env[name].trim() : void 0;
   if (target === "cursor") return join9(home, ".cursor", "mcp.json");
   if (target === "codex") return join9(env.CODEX_HOME || join9(home, ".codex"), "config.toml");
@@ -54506,28 +54506,56 @@ function hostConfigFile(target, { platform = process.platform, env = process.env
   if (target === "gemini") return join9(set("GEMINI_CLI_HOME") ?? home, ".gemini", "settings.json");
   if (target === "antigravity") return join9(home, ".gemini", "config", "mcp_config.json");
   if (target === "claude-desktop") {
-    if (platform === "win32") return packagedClaudeDesktopFile(env, home) ?? join9(env.APPDATA || join9(home, "AppData", "Roaming"), "Claude", "claude_desktop_config.json");
+    if (platform === "win32") return windowsClaudeDesktopFile(env, home, claudeRunning);
     if (platform === "darwin") return join9(home, "Library", "Application Support", "Claude", "claude_desktop_config.json");
     return join9(env.XDG_CONFIG_HOME || join9(home, ".config"), "Claude", "claude_desktop_config.json");
   }
   return void 0;
 }
-function packagedClaudeDesktopFile(env, home) {
+function windowsClaudeDesktopFile(env, home, runningDirs) {
+  const roaming = join9(env.APPDATA || join9(home, "AppData", "Roaming"), "Claude", CLAUDE_DESKTOP_FILE);
+  const ambiguous = (files, openApp) => Object.assign(new Error(`setup_host_config_ambiguous: this computer has ${files.length} Claude Desktop settings files (${files.join("; ")}), so the wallet did not pick one`), { files, openApp });
+  const running = runningDirs(env);
+  if (running.length === 1) return join9(running[0], CLAUDE_DESKTOP_FILE);
+  if (running.length > 1) throw ambiguous(running.map((dir) => join9(dir, CLAUDE_DESKTOP_FILE)), false);
+  const dataRoot = join9(env.LOCALAPPDATA || join9(home, "AppData", "Local"), "Claude-Data");
+  let dataDirs = [];
+  try {
+    dataDirs = readdirSync(dataRoot, { withFileTypes: true }).filter((each) => each.isDirectory() && /^claude_[a-z0-9]+$/i.test(each.name)).map((each) => join9(dataRoot, each.name));
+  } catch {
+    dataDirs = [];
+  }
   const packages = join9(env.LOCALAPPDATA || join9(home, "AppData", "Local"), "Packages");
-  let names;
+  let packaged = [];
   try {
-    names = readdirSync(packages);
+    packaged = readdirSync(packages).filter((each) => /^Claude_[a-z0-9]+$/i.test(each)).map((name) => join9(packages, name, "LocalCache", "Roaming", "Claude", CLAUDE_DESKTOP_FILE));
   } catch {
-    return void 0;
+    packaged = [];
   }
-  const files = names.filter((each) => /^Claude_[a-z0-9]+$/i.test(each)).map((name) => join9(packages, name, "LocalCache", "Roaming", "Claude", "claude_desktop_config.json")).filter((file) => existsSync(file));
-  if (files.length > 1) {
-    throw Object.assign(
-      new Error(`setup_host_config_ambiguous: this computer has ${files.length} Claude Desktop settings files (${files.join("; ")}), so the wallet did not pick one`),
-      { files }
-    );
+  const existing = [...dataDirs.map((dir) => join9(dir, CLAUDE_DESKTOP_FILE)), ...packaged, roaming].filter((file) => existsSync(file));
+  if (existing.length === 1) return existing[0];
+  if (existing.length > 1) throw ambiguous(existing, true);
+  if (dataDirs.length > 1) throw ambiguous(dataDirs.map((dir) => join9(dir, CLAUDE_DESKTOP_FILE)), true);
+  return dataDirs.length === 1 ? join9(dataDirs[0], CLAUDE_DESKTOP_FILE) : roaming;
+}
+function claudeDataDirs(env) {
+  if (claudeDataDirsCache) return claudeDataDirsCache;
+  const shell = join9(env.SystemRoot || env.SYSTEMROOT || "C:\\Windows", "System32", "WindowsPowerShell", "v1.0", "powershell.exe");
+  const query = `Get-CimInstance Win32_Process -Filter "Name='claude.exe'" | ForEach-Object { $_.CommandLine }`;
+  let text3 = "";
+  try {
+    const result = spawnSync3(shell, ["-NoProfile", "-NonInteractive", "-Command", query], { encoding: "utf8", timeout: 6e3, windowsHide: true });
+    text3 = result.status === 0 ? String(result.stdout ?? "") : "";
+  } catch {
+    text3 = "";
   }
-  return files[0];
+  const dirs = /* @__PURE__ */ new Map();
+  for (const match of text3.matchAll(/--user-data-dir=(?:"([^"]+)"|(\S+))/g)) {
+    const dir = resolve6(match[1] ?? match[2]);
+    dirs.set(dir.toLowerCase(), dir);
+  }
+  claudeDataDirsCache = [...dirs.values()];
+  return claudeDataDirsCache;
 }
 function hostConfigText({ home, env = process.env, platform = process.platform, npmVersion, skip = /* @__PURE__ */ new Set(), userHome = homedir() } = {}) {
   const entry = mcpServerEntry({ home, platform, npmVersion });
@@ -55148,7 +55176,7 @@ function changeFileOnce(file, change, { now, platform, restrict, codec = JSON_CO
   }
   return { changed: true, ...backup ? { backup } : {} };
 }
-var import_web396, CONFIG_SCHEMA, CONFIG_FILE, NPM_PACKAGE_NAMES, COMMAND_PACKAGE, NPX_PACKAGE, NPX_INSTALL_FLAGS, MCP_SERVER_NAME, OLD_MCP_SERVER_NAMES, P03_BINDING, PRODUCTION, RETIRED_POOLS, NO_LIMIT_ATOMIC, DEFAULT_CAPS, OLD_DEFAULT_SETUP_CAPS, OLD_DEFAULT_WALLET_BUDGETS, capText, POSITIVE_ATOMIC, HOME_FOLDER, OLDER_HOME_FOLDER, defaultHomeWords, configPath, homeWalletPath, invalid, isPubkey, MAX_OWN_ADDRESSES, isOwnAddressText, salvagePath, clearConfigSalvage, HOST_TARGETS, HOST_NAMES, hostServersKey, hostEntry, CODEX_STARTUP_TIMEOUT_SEC, CODEX_TOOL_TIMEOUT_SEC, PINNED_PACKAGE, LAUNCHER_PACKAGE, NPM_VERSION, knownNpmVersion, RECOVERY_WORDS, NPX_WALLET_LINE, RELEASES_URL, npmStartEnvironment, NPM_START_KEYS, defaultWalletHome, CMD_UNSAFE, programOf, claudeLineDiffers, WINDOWS_SHELL_CODE, CONTINUE_HEADER, tomlString, tomlKey, codexEntryOf, isPlainObject, sameJson, claudeCodeEntry, READ_ONLY_TOOL_NAMES, claudeCodeAllowRules, claudeCodeSettingsFile, UNREADABLE_JSON, JSON_CODEC, indentAt, TEXT_CODEC, RACED;
+var import_web396, CONFIG_SCHEMA, CONFIG_FILE, NPM_PACKAGE_NAMES, COMMAND_PACKAGE, NPX_PACKAGE, NPX_INSTALL_FLAGS, MCP_SERVER_NAME, OLD_MCP_SERVER_NAMES, P03_BINDING, PRODUCTION, RETIRED_POOLS, NO_LIMIT_ATOMIC, DEFAULT_CAPS, OLD_DEFAULT_SETUP_CAPS, OLD_DEFAULT_WALLET_BUDGETS, capText, POSITIVE_ATOMIC, HOME_FOLDER, OLDER_HOME_FOLDER, defaultHomeWords, configPath, homeWalletPath, invalid, isPubkey, MAX_OWN_ADDRESSES, isOwnAddressText, salvagePath, clearConfigSalvage, HOST_TARGETS, HOST_NAMES, hostServersKey, hostEntry, CODEX_STARTUP_TIMEOUT_SEC, CODEX_TOOL_TIMEOUT_SEC, PINNED_PACKAGE, LAUNCHER_PACKAGE, NPM_VERSION, knownNpmVersion, RECOVERY_WORDS, NPX_WALLET_LINE, RELEASES_URL, npmStartEnvironment, NPM_START_KEYS, defaultWalletHome, CMD_UNSAFE, programOf, claudeLineDiffers, WINDOWS_SHELL_CODE, CLAUDE_DESKTOP_FILE, claudeDataDirsCache, CONTINUE_HEADER, tomlString, tomlKey, codexEntryOf, isPlainObject, sameJson, claudeCodeEntry, READ_ONLY_TOOL_NAMES, claudeCodeAllowRules, claudeCodeSettingsFile, UNREADABLE_JSON, JSON_CODEC, indentAt, TEXT_CODEC, RACED;
 var init_config = __esm({
   "wallet/src/setup/config.mjs"() {
     "use strict";
@@ -55240,6 +55268,7 @@ var init_config = __esm({
     programOf = (options) => "claudeProgram" in options ? options.claudeProgram : claudeCodeProgram(options);
     claudeLineDiffers = (options) => claudeProgramWord(programOf(options), "win32", "cmd") !== claudeProgramWord(programOf(options), "win32", "powershell");
     WINDOWS_SHELL_CODE = /[%$`"\r\n]/;
+    CLAUDE_DESKTOP_FILE = "claude_desktop_config.json";
     CONTINUE_HEADER = Object.freeze(["name: Shinjuku Shield", "version: 0.0.1", "schema: v1", "mcpServers:"]);
     tomlString = (value2) => `"${String(value2).replace(/[\\"]/g, (c) => `\\${c}`).replace(/[\u0000-\u001f\u007f]/g, (c) => `\\u${c.charCodeAt(0).toString(16).padStart(4, "0")}`)}"`;
     tomlKey = (key) => /^[A-Za-z0-9_-]+$/.test(key) ? key : tomlString(key);
@@ -78320,7 +78349,7 @@ var init_secretFile = __esm({
 });
 
 // wallet/src/cli/commandName.mjs
-import { spawnSync as spawnSync3 } from "node:child_process";
+import { spawnSync as spawnSync4 } from "node:child_process";
 import { basename as basename4, dirname as dirname15, join as join17 } from "node:path";
 function setCommandVersionSource(source) {
   if (typeof source === "function") versionSource = source;
@@ -78388,9 +78417,9 @@ function terminalUseLinesHere(npmVersion, options = {}) {
     `  ${oneTimeCommandLine("balance", npmVersion)}`
   ];
 }
-function powerShellBlocksScripts({ platform = process.platform, run: run2 = spawnSync3 } = {}) {
+function powerShellBlocksScripts({ platform = process.platform, run: run2 = spawnSync4 } = {}) {
   if (platform !== "win32") return false;
-  if (scriptsBlocked !== null && run2 === spawnSync3) return scriptsBlocked;
+  if (scriptsBlocked !== null && run2 === spawnSync4) return scriptsBlocked;
   let blocked = true;
   try {
     const result = run2(
@@ -78403,7 +78432,7 @@ function powerShellBlocksScripts({ platform = process.platform, run: run2 = spaw
   } catch {
     blocked = true;
   }
-  if (run2 === spawnSync3) scriptsBlocked = blocked;
+  if (run2 === spawnSync4) scriptsBlocked = blocked;
   return blocked;
 }
 function powerShellLines(options = {}) {
@@ -105488,6 +105517,19 @@ async function payViaFloat({
       ...verdict?.state === "landed" ? { transferLanded: true } : {}
     });
   }
+  async function finalAfterLanded() {
+    const deadline = Date.now() + FINAL_AFTER_202_MS;
+    const watched = watch.verdict();
+    let state = ["final", "dead", "cancelled", "landed"].includes(watched?.state) ? watched : await readFloatTransferState(record, fetchImpl, Math.min(FLOAT_STATUS_TIMEOUT_MS, FINAL_AFTER_202_MS));
+    while (state?.state === "landed" && Date.now() < deadline) {
+      await sleep5(Math.min(1e3, Math.max(0, deadline - Date.now())));
+      const left = deadline - Date.now();
+      if (left <= 0) break;
+      const next = await readFloatTransferState(record, fetchImpl, Math.min(FLOAT_STATUS_TIMEOUT_MS, left));
+      if (next && !next.unserved) state = next;
+    }
+    return state;
+  }
   async function sellerLeg() {
     let response;
     let accepted;
@@ -105531,7 +105573,7 @@ async function payViaFloat({
       if (stopResends()) break;
       mark(`seller-resend-fee-payer-${resend + 1}`);
     }
-    if (response.ok && response.status !== 202) {
+    const paidAnswer = async ({ paidKnown = false, knownTransaction } = {}) => {
       let settled;
       try {
         const encoded = response.headers.get("PAYMENT-RESPONSE") ?? response.headers.get("X-PAYMENT-RESPONSE");
@@ -105543,14 +105585,15 @@ async function payViaFloat({
       try {
         resultBase64 = await readResult(response);
       } catch (error) {
-        if (error?.message === "result_too_large_retry_same_request") throw error;
-        unanswered2(error);
+        if (paidKnown) {
+          mark("seller-202-body-unread");
+          resultBase64 = "";
+        } else {
+          if (error?.message === "result_too_large_retry_same_request") throw error;
+          unanswered2(error);
+        }
       }
-      const receipt = {
-        success: true,
-        transaction: isSolanaSignature(settled?.transaction) ? settled.transaction : null,
-        network: record.requirement.network
-      };
+      const receipt = { success: true, transaction: isSolanaSignature(settled?.transaction) ? settled.transaction : isSolanaSignature(knownTransaction) ? knownTransaction : null, network: record.requirement.network };
       const sellerHeaders = keptSellerHeaders(response.headers);
       record = {
         ...record,
@@ -105563,6 +105606,15 @@ async function payViaFloat({
       store.writeWal(walName2, record);
       mark("float-receipt");
       return answered(store, walName2, record, resultBase64, sellerHeaders);
+    };
+    if (response.ok && response.status !== 202) return paidAnswer();
+    let state202;
+    if (response.status === 202) {
+      state202 = await finalAfterLanded();
+      if (state202?.state === "final" || state202?.state === "landed") {
+        mark(`seller-202-${state202.state}`);
+        return paidAnswer({ paidKnown: true, knownTransaction: state202.transaction });
+      }
     }
     const sellerReason = await sellerAnswerText(response);
     if (wasKept) keptAgain(response.status, sellerReason);
@@ -105572,7 +105624,7 @@ async function payViaFloat({
         store.writeWal(walName2, record);
       }
       const watchedNow = watch.verdict();
-      const state = ["final", "dead", "cancelled"].includes(watchedNow?.state) ? watchedNow : await readFloatTransferState(record, fetchImpl);
+      const state = response.status === 202 ? state202 : ["final", "dead", "cancelled"].includes(watchedNow?.state) ? watchedNow : await readFloatTransferState(record, fetchImpl);
       if (state?.state === "cancelled") {
         byVerdict(state, {}, { httpStatus: response.status, ...sellerReason ? { sellerReason } : {} });
       }
@@ -105940,7 +105992,7 @@ function paidResult(record, replayed) {
     float: { floatId: record.floatId }
   };
 }
-var import_web3115, FLOAT_PAYMENT_SCHEMA2, REGENERATE_CODES, FLOAT_PAYMENT_WAL_PREFIX2, FLOAT_CONFIG_SCHEMA, FLOAT_PAY_PATH, FLOAT_MEMO_PATH, FLOAT_STATUS_PATH, MAX_BODY_BYTES, FLOAT_REFUND_ETA_SECONDS, REFUND_READ_EARLY_MS, REFUND_ETA_MAX_SECONDS, refundDueOf, REFUND_SETTLED_AFTER_MS, REFUND_OUTCOME_NEWS_MS, FINISHING_POLL_MS, FINISHING_LIMIT_MS, SELLER_TIMEOUT_MS, FLOAT_STATUS_START_MS, FLOAT_STATUS_POLL_MS, FLOAT_STATUS_TIMEOUT_MS, FLOAT_TRANSFER_DEAD, FLOAT_PAYMENT_REVERTED, VERDICT_POLL_MS, SELLER_ANSWER_VERDICT_MS, TRANSFER_MIN_BLOCKS_LEFT, TRANSFER_FRESH_MS, BLOCK_HEIGHT_TIMEOUT_MS, CONFIG_TIMEOUT_MS, MEMO_UPLOAD_TIMEOUT_MS, CONFIG_CACHE_MS, FLOAT_POOL_WARM_MS, DECIMAL3, POSITIVE, PENDING_CODES, FLOAT_FRONT_HEADER, hash7, fail21, GENERIC_REASON, SELLER_REASON_MAX, SELLER_REASON_READ_BYTES, FEE_PAYER_RESENDS, FEE_PAYER_RESEND_MS, GLOBAL_DISPATCHER4, sortedJson, MODEL_ID, floatPaymentWalName, floatRecordName, FLOAT_KEEP_BYTES_MS, memoryOnlyNeedsScrub, FLOAT_KEEP_OPEN_REQUEST_MS, configCache, configGeneration, configReadSequence, configReads, configRefreshes, SPECULATED_MAX_AGE_MS, speculatedQuotes, poolDomains, FLOAT_FACTS_SCHEMA, floatFacts, floatFactsKey, floatFactsMac, poolDomainReads, poolDomainWarmFailedAt, WARM_RETRY_MS, payerGenerator, etaEntry, loadPayerGenerator, plainText, BROADCAST_REFUSED, BROADCAST_REFUSED_STANDARD, BROADCAST_DEAD, TRANSFER_LANDING_WINDOW_MS, PROOF_DELIVERY_MS, SELF_BROADCAST_LEG1_LEFT_MS, BROADCAST_UNSIGNED, BROADCAST_NO_LOOKUP, BROADCAST_LANDED, BROADCAST_LIMIT_MS, BROADCAST_QUOTE_MARGIN_MS, SELF_BROADCAST_RESEND_MS, SELF_BROADCAST_UNANSWERED_RESEND_MS, SELLER_HEADERS_MAX_COUNT, SELLER_HEADERS_MAX_BYTES, SELLER_HEADERS_KEPT;
+var import_web3115, FLOAT_PAYMENT_SCHEMA2, REGENERATE_CODES, FLOAT_PAYMENT_WAL_PREFIX2, FLOAT_CONFIG_SCHEMA, FLOAT_PAY_PATH, FLOAT_MEMO_PATH, FLOAT_STATUS_PATH, MAX_BODY_BYTES, FLOAT_REFUND_ETA_SECONDS, REFUND_READ_EARLY_MS, REFUND_ETA_MAX_SECONDS, refundDueOf, REFUND_SETTLED_AFTER_MS, REFUND_OUTCOME_NEWS_MS, FINISHING_POLL_MS, FINISHING_LIMIT_MS, SELLER_TIMEOUT_MS, FLOAT_STATUS_START_MS, FLOAT_STATUS_POLL_MS, FLOAT_STATUS_TIMEOUT_MS, FLOAT_TRANSFER_DEAD, FLOAT_PAYMENT_REVERTED, VERDICT_POLL_MS, SELLER_ANSWER_VERDICT_MS, TRANSFER_MIN_BLOCKS_LEFT, TRANSFER_FRESH_MS, BLOCK_HEIGHT_TIMEOUT_MS, CONFIG_TIMEOUT_MS, MEMO_UPLOAD_TIMEOUT_MS, CONFIG_CACHE_MS, FLOAT_POOL_WARM_MS, DECIMAL3, POSITIVE, PENDING_CODES, FLOAT_FRONT_HEADER, hash7, fail21, GENERIC_REASON, SELLER_REASON_MAX, SELLER_REASON_READ_BYTES, FEE_PAYER_RESENDS, FEE_PAYER_RESEND_MS, GLOBAL_DISPATCHER4, sortedJson, MODEL_ID, floatPaymentWalName, floatRecordName, FLOAT_KEEP_BYTES_MS, memoryOnlyNeedsScrub, FLOAT_KEEP_OPEN_REQUEST_MS, configCache, configGeneration, configReadSequence, configReads, configRefreshes, SPECULATED_MAX_AGE_MS, speculatedQuotes, poolDomains, FLOAT_FACTS_SCHEMA, floatFacts, floatFactsKey, floatFactsMac, poolDomainReads, poolDomainWarmFailedAt, WARM_RETRY_MS, payerGenerator, etaEntry, loadPayerGenerator, plainText, BROADCAST_REFUSED, BROADCAST_REFUSED_STANDARD, BROADCAST_DEAD, TRANSFER_LANDING_WINDOW_MS, PROOF_DELIVERY_MS, SELF_BROADCAST_LEG1_LEFT_MS, BROADCAST_UNSIGNED, BROADCAST_NO_LOOKUP, BROADCAST_LANDED, BROADCAST_LIMIT_MS, BROADCAST_QUOTE_MARGIN_MS, SELF_BROADCAST_RESEND_MS, SELF_BROADCAST_UNANSWERED_RESEND_MS, SELLER_HEADERS_MAX_COUNT, SELLER_HEADERS_MAX_BYTES, FINAL_AFTER_202_MS, SELLER_HEADERS_KEPT;
 var init_floatPay = __esm({
   "wallet/src/pay/floatPay.mjs"() {
     "use strict";
@@ -106075,7 +106127,8 @@ var init_floatPay = __esm({
     SELF_BROADCAST_UNANSWERED_RESEND_MS = [2e3, 3e3, 5e3, 1e4, 15e3, 25e3];
     SELLER_HEADERS_MAX_COUNT = 32;
     SELLER_HEADERS_MAX_BYTES = 8 * 1024;
-    SELLER_HEADERS_KEPT = /* @__PURE__ */ new Set(["content-type", "content-language", "cache-control", "retry-after", "x-pod-route"]);
+    FINAL_AFTER_202_MS = 2e4;
+    SELLER_HEADERS_KEPT = /* @__PURE__ */ new Set(["content-type", "content-language", "cache-control", "retry-after", "x-pod-route", "location", "content-location"]);
   }
 });
 
@@ -112429,7 +112482,11 @@ async function paidCall({ session, target, method, headers, body, cap, maxPrice,
         replayed: result.replayed === true,
         receiptFinality: result.receiptFinality ?? null
       };
-      return new Response(bytes2, { status: 200, headers: paidResponseHeaders(result.sellerHeaders, sniffContentType(bytes2), payment) });
+      const status = Number.isInteger(result.status) && result.status >= 200 && result.status <= 299 ? result.status : 200;
+      return new Response(
+        status === 204 || status === 205 ? null : bytes2,
+        { status, headers: paidResponseHeaders(result.sellerHeaders, sniffContentType(bytes2), payment) }
+      );
     } catch (error) {
       const failure3 = error !== null && typeof error === "object" ? error : Object.assign(new Error(String(error)), { cause: error });
       try {
@@ -125992,7 +126049,7 @@ var init_addFunds = __esm({
 });
 
 // wallet/src/setup/backup.mjs
-import { execFileSync as execFileSync3, spawnSync as spawnSync4 } from "node:child_process";
+import { execFileSync as execFileSync3, spawnSync as spawnSync5 } from "node:child_process";
 import { createHash as createHash28, randomBytes as randomBytes24, randomInt as randomInt6 } from "node:crypto";
 import { homedir as homedir2, userInfo } from "node:os";
 import { basename as basename7, dirname as dirname28, extname, isAbsolute as isAbsolute7, join as join30, posix, resolve as resolve25 } from "node:path";
@@ -126042,7 +126099,7 @@ function backupPlaces({ platform = process.platform, env = process.env } = {}) {
   const places = [];
   if (platform === "win32") {
     try {
-      const result = spawnSync4(
+      const result = spawnSync5(
         "powershell.exe",
         [
           "-NoProfile",
@@ -126127,7 +126184,7 @@ function cloudRoots({ platform = process.platform, env = process.env, home = hom
     for (const name of ["OneDrive", "OneDriveConsumer", "OneDriveCommercial"]) add2(env[name], "OneDrive");
     add2(join30(env.USERPROFILE ?? home, "OneDrive"), "OneDrive");
     try {
-      const result = spawnSync4(
+      const result = spawnSync5(
         "reg.exe",
         ["query", "HKCU\\Software\\Microsoft\\OneDrive\\Accounts", "/s", "/v", "UserFolder"],
         { windowsHide: true, encoding: "utf8", timeout: 1e4 }
@@ -126393,7 +126450,7 @@ function systemLink(path, stat2, platform) {
 }
 function windowsDriveType(letter) {
   try {
-    const result = spawnSync4(
+    const result = spawnSync5(
       "powershell.exe",
       ["-NoProfile", "-NonInteractive", "-Command", "([System.IO.DriveInfo]::new($env:SHINJUKU_DRIVE + ':\\')).DriveType.ToString()"],
       { windowsHide: true, encoding: "utf8", timeout: 1e4, env: { ...process.env, SHINJUKU_DRIVE: letter } }
@@ -126426,9 +126483,9 @@ function restrictFolderToOwner(folder, platform) {
   const line = String(execFileSync3(join30(system32, "whoami.exe"), ["/user", "/fo", "csv", "/nh"], { encoding: "utf8", windowsHide: true }));
   const sid = line.match(/"(S-1-[0-9-]+)"/)?.[1];
   if (!sid) return "open";
-  const result = spawnSync4(join30(system32, "icacls.exe"), [folder, "/inheritance:r", "/grant:r", `*${sid}:(OI)(CI)F`], { windowsHide: true, encoding: "utf8" });
+  const result = spawnSync5(join30(system32, "icacls.exe"), [folder, "/inheritance:r", "/grant:r", `*${sid}:(OI)(CI)F`], { windowsHide: true, encoding: "utf8" });
   if (result.status !== 0) return "open";
-  const read = spawnSync4(
+  const read = spawnSync5(
     join30(system32, "WindowsPowerShell", "v1.0", "powershell.exe"),
     [
       "-NoProfile",
@@ -131281,7 +131338,7 @@ function floatRefusal(error, overLimit, tool = "x402_pay") {
     overLimit,
     ...inference ? { ai: {
       // After "if it is refused again, " too (floatWords lowercases it there), so the condition comes last.
-      other: "Try again later, or pass a different model (inference_chat with no prompt lists them), if the user still wants an answer",
+      other: "Try again later, or pass a different model (inference_models lists them), if the user still wants an answer",
       setup: `tell the user to run ${terminalCommand2("setup")} once in a terminal, then reconnect the wallet (${RESTART_STEPS})`
     } } : {}
   });
@@ -134671,7 +134728,7 @@ ${canonical5}`;
       return refuse12(
         code2,
         `${payee} asks a price of zero or less, which is not a payment, so this wallet does not pay it; nothing was paid`,
-        inference ? `Nothing was paid. Tell the user the AI provider asked a price of zero or less, which this wallet does not pay. Do not call ${tool} again unchanged; ask again later, or pick another model (inference_chat with no prompt lists them)` : "Nothing was paid. Tell the user this seller asks a price of zero or less, which this wallet does not pay. Do not retry this URL unchanged; x402_discover finds sellers this wallet can pay",
+        inference ? `Nothing was paid. Tell the user the AI provider asked a price of zero or less, which this wallet does not pay. Do not call ${tool} again unchanged; ask again later, or pick another model (inference_models lists them)` : "Nothing was paid. Tell the user this seller asks a price of zero or less, which this wallet does not pay. Do not retry this URL unchanged; x402_discover finds sellers this wallet can pay",
         { requestId, paid: false }
       );
     } else if (code2 === "fetch_seller_unreachable") {
@@ -140803,8 +140860,12 @@ ${canonical5}`;
     title: "List the private inference models and prices",
     description: "Read only, free, moves nothing: the AI models inference_chat can call (through the AI provider, paid privately from the private balance), each with its price per 1M input and output tokens in USDC atomic units (1000000 = $1). Models today include claude-opus-5, deepseek-v4-1-flash, and qwen3-8-flash; use the ids this tool returns. " + INFERENCE_COST_WORDS + `. The answer also says whether this server can call inference_chat now (it needs Tor or the wallet's own proxy). Call it before inference_chat to choose a model and a max_tokens (the answer's length limit; at least ${INFERENCE_MIN_MAX_TOKENS}).`,
     inputSchema: { type: "object", properties: {}, additionalProperties: false },
-    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
-    hidden: true,
+    // openWorldHint true (Codex round 1 on c4adc23c): the list reads the AI provider's own model list (inference/liveModels.mjs
+    // servedModels, api.usepod.ai over this server's Tor or proxy).
+    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
+    // F7 (a live run, npm 0.3.169, Claude Code auto mode, 2026-11-05 07:00 UTC): listed again. Hidden since the 10-listed-tools
+    // trim (356163fe, 2026-10-20: inference_chat with no prompt listed the models), so "which AI models" went to the tool
+    // that pays, and Claude Code's auto mode blocked it as a real-world transaction. This tool is read only and free.
     // args: inference_chat's model and max_tokens when it is called with no prompt (the call the price is for).
     async run(args = {}) {
       const inference = await inferenceModule();
@@ -140913,7 +140974,7 @@ ${canonical5}`;
     ],
     inference_model_unknown: [
       "that model id is not one the AI provider serves through this wallet",
-      "call inference_chat with no prompt or messages (it lists the model ids, free), then pass one of its ids, for example qwen3-8-flash or claude-opus-5"
+      "call inference_models (it lists the model ids, free), then pass one of its ids, for example qwen3-8-flash or claude-opus-5"
     ],
     inference_messages_invalid: [
       "messages must be a non-empty list of { role, content } with role system, user, or assistant and content text",
@@ -140924,10 +140985,10 @@ ${canonical5}`;
     // row stands only behind that check. Its steps fit under any limit (a higher max_payment can be above the user's own).
     inference_ceiling_over_cap: [
       "this call's ceiling is above the most this call may pay",
-      "lower max_tokens (the answer's length limit), or pick a cheaper model (inference_chat with no prompt lists them)"
+      "lower max_tokens (the answer's length limit), or pick a cheaper model (inference_models lists them)"
     ],
-    inference_upstream_failed: ["the AI provider did not answer with a chat completion", "try again later, or pass a different model (inference_chat with no prompt lists them)"],
-    inference_response_invalid: ["the AI provider's answer could not be read", "try again later, or pass a different model (inference_chat with no prompt lists them)"],
+    inference_upstream_failed: ["the AI provider did not answer with a chat completion", "try again later, or pass a different model (inference_models lists them)"],
+    inference_response_invalid: ["the AI provider's answer could not be read", "try again later, or pass a different model (inference_models lists them)"],
     inference_temperature_invalid: ["temperature must be a number from 0 to 2", "pass temperature 0.7, or leave it out"],
     inference_max_payment_invalid: [
       "the max_payment_atomic argument must be a whole number of atomic units above 0",
@@ -140953,7 +141014,7 @@ ${canonical5}`;
         }
       );
     }
-    const known = INFERENCE_REFUSALS[code2] ?? ["the AI provider could not answer this call", "try again later, or pass a different model (inference_chat with no prompt lists them)"];
+    const known = INFERENCE_REFUSALS[code2] ?? ["the AI provider could not answer this call", "try again later, or pass a different model (inference_models lists them)"];
     const detail = typeof error.detail === "string" && error.detail ? error.detail : `${known[0]}; nothing was paid`;
     const next = typeof error.next === "string" && error.next && code2 !== "inference_ceiling_over_cap" ? error.next : known[1];
     return refuse12(code2, detail, next, { ...extra, paid: false });
@@ -140961,11 +141022,11 @@ ${canonical5}`;
   const inferenceChat2 = {
     name: "inference_chat",
     title: "Ask an AI model, paid privately",
-    description: `Use this when the user wants an AI model's answer paid from the PRIVATE balance: it calls the AI provider's paid chat service (the AI provider picks the model's provider) and pays it privately (the chain does not show which wallet paid); use this tool, not x402_pay, for AI answers. Only prompt (or messages) is needed: model defaults to qwen3-8-flash and max_tokens to 4096 (512 for claude-opus-5). max_tokens is the answer's length limit, in tokens: tell the user "the answer's length limit", never the field name. Called with neither prompt nor messages, it lists the models and their prices and pays nothing (for example qwen3-8-flash, deepseek-v4-1-flash, claude-opus-5). COST: ${INFERENCE_COST_WORDS}. The total paid is never above the cap, and a larger cap never pays more. What max_tokens does not use is NOT refunded when the answer is shorter. max_tokens must be at least ${INFERENCE_MIN_MAX_TOKENS} (a reasoning model spends its first tokens thinking). Example: { "prompt": "Name three prime numbers" }. PRIVACY: the AI provider and the company that runs the model see the prompt and the answer; never put keys, passphrases, or secrets in it. It runs only when this wallet runs over Tor or its own proxy (else inference_tor_required, nothing paid), so they never see this machine's IP. The same caps as x402_pay apply (max_payment can lower the per-payment limit). When max_payment or what the call can cost is above that limit and this app can ask the user, the wallet asks the user once to allow this one call; else the answer says the cost and the limit. On an error code that ends in _retry_same_request, call inference_chat again with the SAME request_id and arguments: it never pays twice. No streaming.`,
+    description: `Use this when the user wants an AI model's answer paid from the PRIVATE balance: it calls the AI provider's paid chat service (the AI provider picks the model's provider) and pays it privately (the chain does not show which wallet paid); use this tool, not x402_pay, for AI answers. Only prompt (or messages) is needed: model defaults to qwen3-8-flash and max_tokens to 4096 (512 for claude-opus-5). max_tokens is the answer's length limit, in tokens: tell the user "the answer's length limit", never the field name. To list the models and their prices (which models, what each costs), call inference_models, not this tool: it is read only and pays nothing (for example qwen3-8-flash, deepseek-v4-1-flash, claude-opus-5). COST: ${INFERENCE_COST_WORDS}. The total paid is never above the cap, and a larger cap never pays more. What max_tokens does not use is NOT refunded when the answer is shorter. max_tokens must be at least ${INFERENCE_MIN_MAX_TOKENS} (a reasoning model spends its first tokens thinking). Example: { "prompt": "Name three prime numbers" }. PRIVACY: the AI provider and the company that runs the model see the prompt and the answer; never put keys, passphrases, or secrets in it. It runs only when this wallet runs over Tor or its own proxy (else inference_tor_required, nothing paid), so they never see this machine's IP. The same caps as x402_pay apply (max_payment can lower the per-payment limit). When max_payment or what the call can cost is above that limit and this app can ask the user, the wallet asks the user once to allow this one call; else the answer says the cost and the limit. On an error code that ends in _retry_same_request, call inference_chat again with the SAME request_id and arguments: it never pays twice. No streaming.`,
     inputSchema: {
       type: "object",
       properties: {
-        model: { type: "string", description: "Optional, default qwen3-8-flash. A model id (inference_chat with no prompt lists them)." },
+        model: { type: "string", description: "Optional, default qwen3-8-flash. A model id (inference_models lists them)." },
         messages: { type: "array", items: {
           type: "object",
           properties: { role: { type: "string", enum: ["system", "user", "assistant"] }, content: { type: "string" } },
@@ -141033,7 +141094,7 @@ ${canonical5}`;
         return inferenceRefusal(error) ?? refuse12(
           "inference_messages_invalid",
           "the model, messages, or max_tokens could not be priced; nothing was paid",
-          "pass messages (or prompt) and max_tokens, for example 256; with neither, inference_chat lists the model ids"
+          "pass messages (or prompt) and max_tokens, for example 256; inference_models lists the model ids"
         );
       }
       const target = checkUrl(inference.USEPOD_X402_CHAT_URL);
@@ -141081,7 +141142,7 @@ ${canonical5}`;
           const canAsk = client?.canElicit?.();
           const needed = ceiling + SHINJUKU_FEE_ATOMIC;
           const over = overLimitStep(needed, launch, canAsk);
-          const smaller = `lower max_tokens (the answer's length limit; at least ${INFERENCE_MIN_MAX_TOKENS}), pick a cheaper model (inference_chat with no prompt lists them)`;
+          const smaller = `lower max_tokens (the answer's length limit; at least ${INFERENCE_MIN_MAX_TOKENS}), pick a cheaper model (inference_models lists them)`;
           const higher = `pass max_payment "${usdcText3(needed)}" (the ceiling plus the fee)`;
           return refuse12(
             "inference_ceiling_over_cap",
@@ -141117,7 +141178,7 @@ ${canonical5}`;
         });
         if (!asked2.ok && asked2.why !== "unsupported") return notAllowed(asked2.why, { tool: "inference_chat", requestId, numbers }, facts);
         if (!asked2.ok) {
-          const fix = "lower max_tokens (the answer's length limit) or pick a cheaper model (inference_chat with no prompt lists them) to fit the limit";
+          const fix = "lower max_tokens (the answer's length limit) or pick a cheaper model (inference_models lists them) to fit the limit";
           const limited = refuse12(
             "inference_ceiling_over_cap",
             detail,
@@ -141181,7 +141242,7 @@ ${canonical5}`;
             return refuse12(
               "fetch_price_over_ceiling",
               `the AI provider asked ${asked2 ? `${usdcText3(asked2)} USDC` : "more"}, above this call's ceiling of ${usdcText3(ceiling)} USDC; nothing was paid`,
-              "the AI provider asked more than this call's ceiling; call inference_chat with no prompt for the current prices and try again, or lower max_tokens",
+              "the AI provider asked more than this call's ceiling; call inference_models for the current prices and try again, or lower max_tokens",
               { requestId, paid: false, ...facts, ...asked2 ? { askedAtomic: asked2 } : {} }
             );
           }
@@ -141982,7 +142043,7 @@ function createSetupTools({
         ...privateInference ? { privateInference: true } : {},
         ...current.userAddress?.saved ? { unshieldTo: current.userAddress.saved } : {},
         ...current.userAddress?.notSaved ? { ownWalletAddressNotSaved: current.userAddress.notSaved } : {},
-        next: `${ACCEPTED_NEXT}The wallet tools are live in this server: the tool list changed (the setup tools are gone, wallet_status included; wallet_balance answers it). This is not a disconnect: do not tell the user to restart or reconnect. Call wallet_balance.${recoveryNext(summary)}` + userAddressNext(current.userAddress) + (limitLine && !say3.includes(limitLine) ? ` No spending limit is set: tell the user "${limitLine}"${/restart/.test(limitLine) ? " (the restart is only for after that command)" : ""}.` : "") + (summary.tor === true ? " Setup ran over Tor, and the wallet runs over Tor: the servers it talks to do not see this computer's IP address." : "") + ` To add funds, call wallet_add_funds: it gives a one-time address for any amount from 0.01 USDC. After the user sends USDC there, ${SAFE_BALANCE_READ}.` + (privateInference ? " Private inference is on: after funding, call inference_chat (with no prompt it lists the models and prices); if this app's wallet entry turns Tor off, inference_chat refuses until the user removes that setting there and reconnects the wallet, so it runs behind Tor." : "") + ` Tell the user plainly: "${HOST_CHAT_NOT_PRIVATE}"` + commandPathNext(summary.commandPath)
+        next: `${ACCEPTED_NEXT}The wallet tools are live in this server: the tool list changed (the setup tools are gone, wallet_status included; wallet_balance answers it). This is not a disconnect: do not tell the user to restart or reconnect. Call wallet_balance.${recoveryNext(summary)}` + userAddressNext(current.userAddress) + (limitLine && !say3.includes(limitLine) ? ` No spending limit is set: tell the user "${limitLine}"${/restart/.test(limitLine) ? " (the restart is only for after that command)" : ""}.` : "") + (summary.tor === true ? " Setup ran over Tor, and the wallet runs over Tor: the servers it talks to do not see this computer's IP address." : "") + ` To add funds, call wallet_add_funds: it gives a one-time address for any amount from 0.01 USDC. After the user sends USDC there, ${SAFE_BALANCE_READ}.` + (privateInference ? " Private inference is on: after funding, call inference_chat (inference_models lists the models and prices); if this app's wallet entry turns Tor off, inference_chat refuses until the user removes that setting there and reconnects the wallet, so it runs behind Tor." : "") + ` Tell the user plainly: "${HOST_CHAT_NOT_PRIVATE}"` + commandPathNext(summary.commandPath)
       });
     }
     if (current.state === "confirming") return json4({ say: SETUP_CONFIRMING_SAY, ok: true, stage: "confirming", next: SETUP_CONFIRMING_NEXT });
@@ -142226,7 +142287,7 @@ function createSetupTools({
     wallet_transfer_token: "Sells a Solana token this wallet holds for USDC and sends that USDC privately to an address.",
     wallet_transfer_token_status: "Shows how a token sale and send goes, and can stop it.",
     inference_server: "Starts a private AI address on this computer for another AI app (an OpenAI-compatible base URL and key): each AI answer is paid privately from the private balance.",
-    inference_chat: "Asks an AI model and pays for its answer privately from the private balance; with no prompt it lists the models and their prices."
+    inference_chat: "Asks an AI model and pays for its answer privately from the private balance (inference_models lists the models and their prices)."
   };
   const notSetUp2 = (name) => ({
     name,
@@ -142452,7 +142513,7 @@ var init_tools = __esm({
       return capAtomic !== void 0 && day !== void 0 && String(day) !== NO_LIMIT_ATOMIC && String(capAtomic) === String(day) ? "--max-session" : "--max-payment";
     };
     noPriceFits = (roomAtomic) => ATOMIC_TEXT.test(String(roomAtomic ?? "")) && BigInt(roomAtomic) <= SHINJUKU_FEE_ATOMIC;
-    cheaperText = (tool, roomAtomic) => noPriceFits(roomAtomic) ? "" : tool === "inference_chat" ? " Or lower max_tokens (the answer's length limit) or pick a cheaper model (inference_chat with no prompt lists them)." : " Or call x402_discover to look for a cheaper seller of the same data.";
+    cheaperText = (tool, roomAtomic) => noPriceFits(roomAtomic) ? "" : tool === "inference_chat" ? " Or lower max_tokens (the answer's length limit) or pick a cheaper model (inference_models lists them)." : " Or call x402_discover to look for a cheaper seller of the same data.";
     limitNext = ({ totalAtomic, capAtomic } = {}, { flag: flag3 = payCapFlag(capAtomic), verb = "paid", noun = "costs", tool } = {}) => `${totalAtomic && capAtomic ? `Nothing was ${verb}. Tell the user: this ${noun} ${usdcText3(totalAtomic)} USDC and the ${capName(flag3)} is ${usdcText3(capAtomic)} USDC.` : `Nothing was ${verb}. Tell the user this is above the ${capName(flag3)}.`} ${capRaiseText(flag3)}${verb === "paid" ? cheaperText(tool, capAtomic) : ""}`;
     overLimitStep = (neededAtomic, launchAtomic, canAsk) => {
       if (launchAtomic === void 0 || BigInt(neededAtomic) <= BigInt(launchAtomic)) return void 0;
@@ -142829,7 +142890,6 @@ var init_tools = __esm({
       "wallet_pay_me_status",
       "wallet_unshield_cancel",
       "wallet_move_status",
-      "inference_models",
       "wallet_receive_shielded"
     ]);
     setupTerminalNext = () => `Tell the user to run ${terminalCommand2("setup", { code: true })} in a terminal on this machine, then reconnect the wallet (${RESTART_STEPS})`;
@@ -144334,7 +144394,7 @@ var init_stdioServer = __esm({
     SUPPORTED_PROTOCOL_VERSIONS = Object.freeze(["2025-06-18", "2025-03-26", "2024-11-05"]);
     MAX_LINE_BYTES = 4 * 1024 * 1024;
     POSITIVE_ATOMIC7 = /^[1-9][0-9]{0,30}$/;
-    INSTRUCTIONS_BASE = `A self-custody Shinjuku Shield wallet on this machine; no tool takes or returns its keys or passphrase. Each answer's say is one plain sentence for the user; other fields hold numbers. Never tell the user a tool, field, code or protocol name (x402, MCP) unless told to. Map a plain request to one tool: "what is my balance" -> wallet_balance (safe at any time); "add money" / "deposit" / "move USDC in from Phantom or an exchange" -> wallet_add_funds (a one-time address; the next wallet_balance after the USDC arrives makes it private, up to 5 USDC); "shield the USDC on this wallet's own address" -> wallet_shield; "stop" / "cancel" -> wallet_cancel (the request_id of what to stop); "pay this URL" -> x402_pay (no preview needed); "what does this URL cost" -> x402_preview (only when asked); "find a paid API for X" -> x402_discover, then x402_pay on its url; "send 2 USDC to <address>" -> wallet_unshield; "show my payments" -> wallet_receipts; "send another token" -> wallet_transfer_token; "ask an AI model" / "which AI models" -> inference_chat (no prompt: it lists models and prices); "give my other AI app a private AI" -> inference_server (a local OpenAI-compatible URL and key). wallet_balance answers ONE balance (balanceAtomic); x402_pay pays any paid URL from it (a seller that cannot take a private payment is paid through Shinjuku; max_payment covers amountAtomic with fee). Fields ending in Atomic are atomic units (1000000 = 1 USDC); tell the user USDC. The wallet does its own upkeep (no user command). A shield, add-funds or unshield call can run for minutes: call again with the SAME request_id as next says. Pass your own request_id to x402_pay: the same one never pays or moves money twice (a code ending in _retry_same_request: call again with it). A wallet_unshield send to an address not approved ahead asks the user to confirm. x402_pay never pays above the spending limits (one payment; 24 hours); with none, the balance is the only bound. Never claim a payment happened unless the answer has a transaction. Privacy: the chain does not show which wallet paid, but this app and its model provider see every URL, body, price and answer you handle; reach a seller or its domain only through these tools, never yourself (no curl, browser, DNS or DNS-over-HTTPS lookup), also when the user asks for no Tor: that shows their IP address to the site or a DNS company. When an answer's poolSwitch.items[] item has tellUser true, tell the user its message once, in plain words; the wallet moves the balance by itself.`;
+    INSTRUCTIONS_BASE = `A self-custody Shinjuku Shield wallet on this machine; no tool takes or returns its keys or passphrase. Each answer's say is one plain sentence for the user; other fields hold numbers. Never tell the user a tool, field, code or protocol name (x402, MCP) unless told to. Map a plain request to one tool: "what is my balance" -> wallet_balance (safe at any time); "add money" / "deposit" / "move USDC in from Phantom or an exchange" -> wallet_add_funds (a one-time address; the next wallet_balance after the USDC arrives makes it private, up to 5 USDC); "shield the USDC on this wallet's own address" -> wallet_shield; "stop" / "cancel" -> wallet_cancel (the request_id of what to stop); "pay this URL" -> x402_pay (no preview needed); "what does this URL cost" -> x402_preview (only when asked); "find a paid API for X" -> x402_discover, then x402_pay on its url; "send 2 USDC to <address>" -> wallet_unshield; "show my payments" -> wallet_receipts; "send another token" -> wallet_transfer_token; "which AI models" -> inference_models; "ask an AI model" -> inference_chat; "give my other AI app a private AI" -> inference_server (a local OpenAI-compatible URL and key). wallet_balance answers ONE balance (balanceAtomic); x402_pay pays any paid URL from it (a seller that cannot take a private payment is paid through Shinjuku; max_payment covers amountAtomic with fee). Fields ending in Atomic are atomic units (1000000 = 1 USDC); tell the user USDC. The wallet does its own upkeep (no user command). A shield, add-funds or unshield call can run for minutes: call again with the SAME request_id as next says. Pass your own request_id to x402_pay: the same one never pays or moves money twice (a code ending in _retry_same_request: call again with it). A wallet_unshield send to an address not approved ahead asks the user to confirm. x402_pay never pays above the spending limits (one payment; 24 hours); with none, the balance is the only bound. Never claim a payment happened unless the answer has a transaction. Privacy: the chain does not show which wallet paid, but this app and its model provider see every URL, body, price and answer you handle; reach a seller or its domain only through these tools, never yourself (no curl, browser, DNS or DNS-over-HTTPS lookup), also when the user asks for no Tor: that shows their IP address to the site or a DNS company. When an answer's poolSwitch.items[] item has tellUser true, tell the user its message once, in plain words; the wallet moves the balance by itself.`;
     SELL_LINE = "To sell or swap a token the wallet holds: wallet_transfer_token.";
     OWN_ADDRESS_LINE = '"Send to my (main) wallet": wallet_unshield with no to uses the address saved at setup; never ask for it.';
     INSTRUCTIONS = `${INSTRUCTIONS_BASE} ${SELL_LINE} ${OWN_ADDRESS_LINE} ${HOST_BLOCKED_LINE}`;
@@ -145210,7 +145270,7 @@ var init_serve = __esm({
 
 // wallet/src/inference/serveRunner.mjs
 import { randomBytes as randomBytes28 } from "node:crypto";
-import { spawn as spawn6, spawnSync as spawnSync5 } from "node:child_process";
+import { spawn as spawn6, spawnSync as spawnSync6 } from "node:child_process";
 import { dirname as dirname31, join as join35, resolve as resolve29 } from "node:path";
 function writeAtomic4(path, text3) {
   const temp = `${path}.${randomBytes28(4).toString("hex")}.tmp`;
@@ -145480,7 +145540,7 @@ function logFailureLine(logPath, offset) {
 function endLaunched(pid, platform) {
   if (!pidAlive2(pid)) return;
   try {
-    if (platform === "win32") spawnSync5("taskkill", ["/PID", String(pid), "/T", "/F"], { stdio: "ignore", windowsHide: true, timeout: 1e4 });
+    if (platform === "win32") spawnSync6("taskkill", ["/PID", String(pid), "/T", "/F"], { stdio: "ignore", windowsHide: true, timeout: 1e4 });
     else {
       try {
         process.kill(-pid, "SIGKILL");
@@ -149188,7 +149248,7 @@ var init_torMissingMcp = __esm({
 // wallet/src/seller/setup.mjs
 import http2 from "node:http";
 import { createHash as createHash36, randomBytes as randomBytes33 } from "node:crypto";
-import { spawnSync as spawnSync9 } from "node:child_process";
+import { spawnSync as spawnSync10 } from "node:child_process";
 import { join as join43, resolve as resolve38 } from "node:path";
 function separateSellerHome(env, userHome) {
   return env.SHIELDED_WALLET_HOME ? `${resolve38(env.SHIELDED_WALLET_HOME)}-seller` : join43(userHome, ".shinjuku-shield-seller");
@@ -149559,7 +149619,7 @@ async function setUpWith({ values, deps, terminal, say: say3, home, wallet, make
     }
     say3("Making a new wallet for your sales...");
     const torRun = network?.tor === true ? ["--tor", "--proxy", network.tunnel] : [];
-    const made = spawnSync9(
+    const made = spawnSync10(
       process.execPath,
       [
         ...process.execArgv,
@@ -150860,7 +150920,7 @@ init_fs();
 init_processLock();
 init_config();
 init_proofTools();
-import { spawnSync as spawnSync6 } from "node:child_process";
+import { spawnSync as spawnSync7 } from "node:child_process";
 import { dirname as dirname32, join as join37, resolve as resolve33 } from "node:path";
 var NATIVE_SET_MOVE_FILE = "setup-files-move.json";
 function nativeSetMoveRecord(home) {
@@ -150903,7 +150963,7 @@ function processIdentity(pid) {
   if (!pidAlive3(pid)) return void 0;
   try {
     if (process.platform === "win32") {
-      const result2 = spawnSync6(
+      const result2 = spawnSync7(
         "powershell.exe",
         [
           "-NoProfile",
@@ -150916,7 +150976,7 @@ function processIdentity(pid) {
       const [started2, ...rest] = String(result2.stdout ?? "").split(/\r?\n/);
       return /^\d+$/.test(started2.trim()) ? { startedMs: Number(started2.trim()), commandLine: rest.join(" ") } : void 0;
     }
-    const result = spawnSync6("ps", ["-o", "lstart=", "-o", "args=", "-p", String(Number(pid))], { encoding: "utf8", timeout: 1e4, env: { ...process.env, LC_ALL: "C" } });
+    const result = spawnSync7("ps", ["-o", "lstart=", "-o", "args=", "-p", String(Number(pid))], { encoding: "utf8", timeout: 1e4, env: { ...process.env, LC_ALL: "C" } });
     const line = String(result.stdout ?? "").trim();
     const started = Date.parse(line.slice(0, 24));
     return Number.isFinite(started) ? { startedMs: started, commandLine: line.slice(24) } : void 0;
@@ -151060,8 +151120,8 @@ init_errorCodes();
 init_errorLine();
 init_cli();
 import { createInterface as createInterface2 } from "node:readline";
-import { homedir as homedir4, tmpdir as tmpdir6 } from "node:os";
-import { spawnSync as spawnSync10 } from "node:child_process";
+import { homedir as homedir5, tmpdir as tmpdir6 } from "node:os";
+import { spawnSync as spawnSync11 } from "node:child_process";
 
 // wallet/src/merge/cli.mjs
 init_fs();
@@ -155332,7 +155392,7 @@ init_fs();
 init_proxy();
 init_config();
 init_processLock();
-import { spawn as spawn11, spawnSync as spawnSync7 } from "node:child_process";
+import { spawn as spawn11, spawnSync as spawnSync8 } from "node:child_process";
 import { createHash as createHash35, createHmac as createHmac10, randomBytes as randomBytes32, timingSafeEqual as timingSafeEqual4 } from "node:crypto";
 import net3 from "node:net";
 import { join as join41 } from "node:path";
@@ -155374,7 +155434,7 @@ var pidAlive4 = (pid) => {
 function processOf(pid) {
   if (!pidAlive4(pid)) return void 0;
   try {
-    const result = spawnSync7(
+    const result = spawnSync8(
       "powershell.exe",
       [
         "-NoProfile",
@@ -155398,7 +155458,7 @@ function isOwnTor(home, state) {
 }
 function stopOwnTor(home, state) {
   if (!isOwnTor(home, state)) return;
-  spawnSync7("taskkill", ["/PID", String(state.pid), "/FI", "IMAGENAME eq tor.exe", "/F"], { windowsHide: true, timeout: 1e4 });
+  spawnSync8("taskkill", ["/PID", String(state.pid), "/FI", "IMAGENAME eq tor.exe", "/F"], { windowsHide: true, timeout: 1e4 });
 }
 var cookieFile = (home) => join41(managedTorDir(home), "control.cookie");
 var CONTROL_TIMEOUT_MS = 3e3;
@@ -155543,7 +155603,7 @@ async function installBundle(home, say3) {
   rmSync(target, { recursive: true, force: true });
   mkdirSync(unpacking, { recursive: true });
   const tar = join41(process.env.SystemRoot ?? "C:\\Windows", "System32", "tar.exe");
-  const result = spawnSync7(tar, ["-xzf", archive, "-C", unpacking], { windowsHide: true, encoding: "utf8", timeout: 12e4 });
+  const result = spawnSync8(tar, ["-xzf", archive, "-C", unpacking], { windowsHide: true, encoding: "utf8", timeout: 12e4 });
   rmSync(archive, { force: true });
   if (result.status !== 0 || !BUNDLE_FILES.every((parts) => existsSync(join41(unpacking, ...parts)))) {
     rmSync(unpacking, { recursive: true, force: true });
@@ -155797,14 +155857,15 @@ init_backup();
 
 // wallet/src/setup/hostCheck.mjs
 init_fs();
-import { spawn as spawn12, spawnSync as spawnSync8 } from "node:child_process";
+import { spawn as spawn12, spawnSync as spawnSync9 } from "node:child_process";
+import { homedir as homedir3 } from "node:os";
 import { dirname as dirname35, join as join42 } from "node:path";
 var INHERITED = {
   win32: ["APPDATA", "HOMEDRIVE", "HOMEPATH", "LOCALAPPDATA", "PROCESSOR_ARCHITECTURE", "SYSTEMDRIVE", "SYSTEMROOT", "TEMP", "USERNAME", "USERPROFILE", "PROGRAMFILES"],
   other: ["HOME", "LOGNAME", "SHELL", "TERM", "USER"]
 };
 var HOST_CHECK_TIMEOUT_MS = 24e4;
-function appPath({ platform = process.platform, env = process.env, run: run2 = spawnSync8 } = {}) {
+function appPath({ platform = process.platform, env = process.env, run: run2 = spawnSync9 } = {}) {
   if (platform === "win32") {
     try {
       const result = run2(
@@ -155837,6 +155898,7 @@ function nodePathFix({ platform = process.platform, env = process.env, execPath
 var npmProxyEnvironment = (url) => ({
   npm_config_offline: "false",
   npm_config_prefer_offline: "false",
+  npm_config_prefer_online: "true",
   npm_config_proxy: url,
   npm_config_https_proxy: url,
   npm_config_noproxy: "",
@@ -155847,7 +155909,9 @@ var npmProxyEnvironment = (url) => ({
   NO_PROXY: "",
   no_proxy: ""
 });
+var NPM_ONLINE_ENVIRONMENT = Object.freeze({ npm_config_offline: "false", npm_config_prefer_offline: "false", npm_config_prefer_online: "true" });
 var NPM_OFFLINE_ENVIRONMENT = Object.freeze({ npm_config_offline: "true" });
+var NPM_CACHE_KEYS = /* @__PURE__ */ new Set(["npm_config_cache", "npm_config_userconfig", "npm_config_globalconfig", "npm_config_prefix"]);
 function appEnvironment(entry, { platform = process.platform, env = process.env, terminal = false, path, extra } = {}) {
   const names = platform === "win32" ? INHERITED.win32 : INHERITED.other;
   const out = {};
@@ -155856,10 +155920,15 @@ function appEnvironment(entry, { platform = process.platform, env = process.env,
     if (key !== void 0 && env[key] !== void 0) out[name] = env[key];
   }
   out.PATH = terminal ? env.PATH ?? env.Path ?? "" : path ?? appPath({ platform, env });
+  if (terminal) {
+    for (const [key, value2] of Object.entries(env)) {
+      if (value2 !== void 0 && NPM_CACHE_KEYS.has(key.toLowerCase())) out[key] = value2;
+    }
+  }
   return { ...out, ...entry.env ?? {}, ...extra ?? {} };
 }
 var nodeMissing = (code2, text3) => code2 === 9009 || code2 === 127 || /is not recognized|command not found|No such file or directory|env: .?node/i.test(text3);
-function checkHostEntry(entry, { platform = process.platform, env = process.env, terminal = false, path, extraEnv, timeoutMs = HOST_CHECK_TIMEOUT_MS, spawnImpl = spawn12 } = {}) {
+function checkHostEntry(entry, { platform = process.platform, env = process.env, terminal = false, path, extraEnv, timeoutMs = HOST_CHECK_TIMEOUT_MS, spawnImpl = spawn12, cwd = homedir3() } = {}) {
   const started = Date.now();
   return new Promise((resolveCheck) => {
     let child;
@@ -155875,6 +155944,7 @@ function checkHostEntry(entry, { platform = process.platform, env = process.env,
     };
     try {
       child = spawnImpl(entry.command, entry.args, {
+        cwd,
         env: appEnvironment(entry, { platform, env, terminal, path, extra: extraEnv }),
         stdio: ["pipe", "pipe", "pipe"],
         windowsHide: true,
@@ -155932,7 +156002,7 @@ function end(child, platform) {
   const killTree = () => {
     clearInterval(poll);
     if (platform === "win32") {
-      if (child.exitCode === null) spawnSync8("taskkill.exe", ["/PID", String(child.pid), "/T", "/F"], { windowsHide: true, stdio: "ignore" });
+      if (child.exitCode === null) spawnSync9("taskkill.exe", ["/PID", String(child.pid), "/T", "/F"], { windowsHide: true, stdio: "ignore" });
       return;
     }
     if (!groupHoldsOwn(child.pid, child.spawnedAt)) return;
@@ -156740,7 +156810,7 @@ function personWords(text3, { homeJob = false } = {}) {
 init_fs();
 init_secretFile();
 init_config();
-import { homedir as homedir3 } from "node:os";
+import { homedir as homedir4 } from "node:os";
 import { join as join45, resolve as resolve39 } from "node:path";
 init_commandName();
 init_store();
@@ -156964,7 +157034,7 @@ function runsThisWallet(servers, home) {
   return states.includes(true) ? true : states.includes(null) ? null : false;
 }
 function claudeCodeState(env, home) {
-  const config = readJsonFile(join45(env.CLAUDE_CONFIG_DIR || homedir3(), ".claude.json"));
+  const config = readJsonFile(join45(env.CLAUDE_CONFIG_DIR || homedir4(), ".claude.json"));
   if (config === void 0 || config === null) return { linked: config === null ? null : false };
   const user = runsThisWallet(config.mcpServers, home);
   if (user === true) return { linked: true };
@@ -156978,7 +157048,7 @@ function agentHostsOf(env, home) {
   const jsonHost = (target) => {
     let file;
     try {
-      file = hostConfigFile(target, { env, home: homedir3() });
+      file = hostConfigFile(target, { env, home: homedir4(), claudeRunning: () => [] });
     } catch {
       return null;
     }
@@ -156986,7 +157056,7 @@ function agentHostsOf(env, home) {
     return config === void 0 ? false : config === null ? null : runsThisWallet(config[hostServersKey(target)], home);
   };
   const continueHost = () => {
-    const file = hostConfigFile("continue", { env, home: homedir3() });
+    const file = hostConfigFile("continue", { env, home: homedir4() });
     let size;
     try {
       size = statSync(file).size;
@@ -157002,7 +157072,7 @@ function agentHostsOf(env, home) {
     }
   };
   const codexHost = () => {
-    const file = hostConfigFile("codex", { env, home: homedir3() });
+    const file = hostConfigFile("codex", { env, home: homedir4() });
     let size;
     try {
       size = statSync(file).size;
@@ -160245,7 +160315,7 @@ function claudeCodeEntryOf(deps) {
 function runClaude(args, program = "claude", stdio = "inherit") {
   const options = { stdio, windowsHide: true, timeout: 12e4 };
   const programWord = program === "claude" ? program : `"${program}"`;
-  const result = process.platform === "win32" && !/\.exe$/i.test(program) ? spawnSync10([programWord, ...args.map((word) => hostShellWord(word, "win32"))].join(" "), { ...options, shell: true }) : spawnSync10(program, args, options);
+  const result = process.platform === "win32" && !/\.exe$/i.test(program) ? spawnSync11([programWord, ...args.map((word) => hostShellWord(word, "win32"))].join(" "), { ...options, shell: true }) : spawnSync11(program, args, options);
   return result.status ?? 1;
 }
 function claudeRemoveLines(program, platform) {
@@ -160296,7 +160366,7 @@ function hostStartCheck(app, options, deps, { terminal, noTor = false }) {
       deps.io.out(`Checking that ${app} can start the wallet (the first time, this downloads the wallet${net4.url ? " over Tor" : ""}: up to a few minutes)...
 `);
       const start = async (entry) => {
-        if (!net4.url) return check(entry, { platform, env, terminal });
+        if (!net4.url) return check(entry, { platform, env, terminal, extraEnv: NPM_ONLINE_ENVIRONMENT });
         const filled = await check(entry, { platform, env, terminal, extraEnv: npmProxyEnvironment(net4.url) });
         if (!filled.ok) return filled;
         return check(entry, { platform, env, terminal, extraEnv: NPM_OFFLINE_ENVIRONMENT });
@@ -160342,12 +160412,6 @@ async function addToHosts(targets, home, deps, { force = false, npmVersion, ask,
   const options = { home, env: deps.env, platform: deps.platform ?? process.platform, npmVersion };
   const done = /* @__PURE__ */ new Set();
   const kept3 = /* @__PURE__ */ new Set();
-  let torOn;
-  try {
-    torOn = readSetupConfig(home)?.tor === true;
-  } catch {
-    torOn = false;
-  }
   for (const target of targets) {
     if (target === "claude-code") {
       const why = claudeCodeShellWhy(options);
@@ -160356,9 +160420,9 @@ async function addToHosts(targets, home, deps, { force = false, npmVersion, ask,
 `);
         continue;
       }
-      const first2 = torOn ? await hostStartCheck("Claude Code", options, deps, { terminal: true, noTor }) : void 0;
-      if (first2 && !first2.ok) {
-        io.out(`Not added to Claude Code: ${hostCheckWords("Claude Code", first2)}
+      const first = await hostStartCheck("Claude Code", options, deps, { terminal: true, noTor });
+      if (!first.ok) {
+        io.out(`Not added to Claude Code: ${hostCheckWords("Claude Code", first)}
 `);
         continue;
       }
@@ -160405,9 +160469,6 @@ ${claudeCodeLines({ ...claudeOptions, claudeProgram }).map((line) => `  ${line}`
       const removed = olderOwn || replacedOther || status !== 0 && force && quiet(["mcp", "remove", "--scope", "user", MCP_SERVER_NAME]) === 0;
       if (removed && status !== 0) status = runClaudeCli(claudeCodeArgs(options));
       if (status === 0) done.add(target);
-      const check = status === 0 ? await hostStartCheck("Claude Code", options, deps, { terminal: true, noTor }) : void 0;
-      if (check && !check.ok) io.out(`${hostCheckWords("Claude Code", check)}
-`);
       const homeNow = replacedOther ? ` Claude Code now uses the wallet in ${home}; the wallet in ${otherHome} is unchanged.` : "";
       io.out(status === 0 ? `${removed ? "Replaced the wallet in" : "Added the wallet to"} Claude Code, for all your folders.${homeNow} ${allowWalletChecks(deps).say} ${RESTART_APP("Claude Code")}
 ` : `Claude Code did not take the server; its message is above. Run this yourself:
@@ -160424,27 +160485,23 @@ ${claudeRemoveLines(claudeProgram, options.platform)}
       file = hostConfigFile(target, { ...options, home: deps.homedir() });
     } catch (error) {
       if (!String(error?.message).startsWith("setup_host_config_ambiguous:")) throw error;
-      io.out(`Not added to ${app}: this computer has more than one ${app} settings file (${error.files.join("; ")}), so the wallet did not pick one. In ${app}, Settings > Developer > Edit Config opens the file it reads: add the entry below to it by hand.
+      io.out(`Not added to ${app}: this computer has more than one ${app} settings file (${error.files.join("; ")}), so the wallet did not pick one. ${error.openApp ? `Open ${app} and run this setup line again (the open app shows which file it reads), or: ` : ""}In ${app}, Settings > Developer > Edit Config opens the file it reads: add the entry below to it by hand.
 `);
       continue;
     }
-    const first = torOn ? await hostStartCheck(app, options, deps, { terminal: false, noTor }) : void 0;
-    if (first && !first.ok) {
-      io.out(`Not added to ${app}: ${hostCheckWords(app, first)}
+    const check = await hostStartCheck(app, options, deps, { terminal: false, noTor });
+    if (!check.ok) {
+      io.out(`Not added to ${app}: ${hostCheckWords(app, check)}
 `);
       continue;
     }
     try {
       const write = (entry, writeForce) => target === "codex" ? addToCodexHost(file, entry, { force: writeForce }) : target === "continue" ? addToContinueHost(file, hostEntry(target, entry), { force: writeForce }) : addToJsonHost(file, hostEntry(target, entry), { force: writeForce, key: hostServersKey(target) });
-      let added = write(mcpServerEntry(options), force);
+      const added = write(mcpServerEntry({ ...options, ...check.path ? { path: check.path } : {} }), force);
       for (const old of added.replaced ?? []) io.out(`Replaced the old ${old} entry in ${app}.
 `);
-      const check = await hostStartCheck(app, options, deps, { terminal: false, noTor });
-      if (check.path) added = { ...write(mcpServerEntry({ ...options, path: check.path }), false), changed: true };
-      io.out(!added.changed ? `${app} already has the wallet: ${file} (nothing changed).${check.ok ? ` ${app} starts it (checked).` : ""} If ${app} does not show the wallet yet: ${hostAddedNext(target, app, options.platform)}
-` : `Added the wallet to ${app}: ${file}${added.backup ? ` (the old file was copied to ${added.backup}, readable by you alone)` : ""}.${check.ok ? ` ${app} starts it (checked).` : ""} ${hostAddedNext(target, app, options.platform)}
-`);
-      if (!check.ok) io.out(`${hostCheckWords(app, check)}
+      io.out(!added.changed ? `${app} already has the wallet: ${file} (nothing changed). The wallet starts with this entry (checked). If ${app} does not show the wallet yet: ${hostAddedNext(target, app, options.platform)}
+` : `Added the wallet to ${app}: ${file}${added.backup ? ` (the old file was copied to ${added.backup}, readable by you alone)` : ""}. The wallet starts with this entry (checked). ${hostAddedNext(target, app, options.platform)}
 `);
       done.add(target);
     } catch (error) {
@@ -160579,7 +160636,7 @@ function npmShinjukuBinExists(output2) {
 }
 function runNpm(args, env) {
   const windows = process.platform === "win32";
-  const result = windows ? spawnSync10(["npm", ...args].map((word) => hostShellWord(word, "win32")).join(" "), { env, shell: true, windowsHide: true, encoding: "utf8", timeout: 6e5, maxBuffer: 16 * 1024 * 1024 }) : spawnSync10("npm", args, { env, windowsHide: true, encoding: "utf8", timeout: 6e5, maxBuffer: 16 * 1024 * 1024 });
+  const result = windows ? spawnSync11(["npm", ...args].map((word) => hostShellWord(word, "win32")).join(" "), { env, shell: true, windowsHide: true, encoding: "utf8", timeout: 6e5, maxBuffer: 16 * 1024 * 1024 }) : spawnSync11("npm", args, { env, windowsHide: true, encoding: "utf8", timeout: 6e5, maxBuffer: 16 * 1024 * 1024 });
   return { status: result.status ?? 1, output: `${result.stdout ?? ""}${result.stderr ?? ""}${result.error ? `
 ${result.error.message}` : ""}` };
 }
@@ -165605,7 +165662,7 @@ function defaultDependencies() {
     fetch: (...args) => fetch(...args),
     platform: process.platform,
     arch: process.arch,
-    homedir: () => homedir4(),
+    homedir: () => homedir5(),
     stdinIsTTY: () => Boolean(process.stdin.isTTY),
     /** True when stdout is a terminal: add-funds then ends with a short summary instead of the status as JSON. */
     stdoutIsTTY: () => Boolean(process.stdout.isTTY),